Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- type=SYSCALL msg=audit(1531967949.881:171): arch=c000003e syscall=59 success=yes exit=0 a0=55dc18dcb050 a1=55dc18dd0dc0 a2=55dc18dcb090 a3=7ffe43ccf651 items=2 ppid=439 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="sshd" exe="/usr/sbin/sshd" key=(null)
- type=EXECVE msg=audit(1531967949.881:171): argc=3 a0="/usr/sbin/sshd" a1="-D" a2="-R"
- type=CWD msg=audit(1531967949.881:171): cwd="/"
- type=PATH msg=audit(1531967949.881:171): item=0 name="/usr/sbin/sshd" inode=145941 dev=08:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 nametype=NORMAL
- type=PATH msg=audit(1531967949.881:171): item=1 name=(null) inode=393295 dev=08:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 nametype=NORMAL
- type=PROCTITLE msg=audit(1531967949.881:171): proctitle=2F7573722F7362696E2F73736864002D44002D52
- type=USER_ACCT msg=audit(1531967951.001:172): pid=2440 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="srashid" exe="/usr/sbin/sshd" hostname=c-73-162-112-222.hsd1.ca.comcast.net addr=73.162.112.208 terminal=ssh res=success'
- type=CRED_ACQ msg=audit(1531967951.001:173): pid=2440 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="srashid" exe="/usr/sbin/sshd" hostname=c-73-162-112-222.hsd1.ca.comcast.net addr=73.162.112.208 terminal=ssh res=success'
- type=LOGIN msg=audit(1531967951.005:174): pid=2440 uid=0 old-auid=4294967295 auid=1000 old-ses=4294967295 ses=3 res=1
- type=CONFIG_CHANGE msg=audit(1531967951.005:175): pid=2440 uid=0 auid=1000 ses=3 op=tty_set old-enabled=0 new-enabled=1 old-log_passwd=0 new-log_passwd=0 res=1
- type=USER_START msg=audit(1531967951.005:176): pid=2440 uid=0 auid=1000 ses=3 msg='op=PAM:session_open acct="srashid" exe="/usr/sbin/sshd" hostname=c-73-162-112-222.hsd1.ca.comcast.net addr=73.162.112.208 terminal=ssh res=success'
- type=CRED_ACQ msg=audit(1531967951.009:177): pid=2443 uid=0 auid=1000 ses=3 msg='op=PAM:setcred acct="srashid" exe="/usr/sbin/sshd" hostname=c-73-162-112-222.hsd1.ca.comcast.net addr=73.162.112.208 terminal=ssh res=success'
Add Comment
Please, Sign In to add comment