Guest User

Untitled

a guest
Jul 19th, 2018
64
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.00 KB | None | 0 0
  1. type=SYSCALL msg=audit(1531967949.881:171): arch=c000003e syscall=59 success=yes exit=0 a0=55dc18dcb050 a1=55dc18dd0dc0 a2=55dc18dcb090 a3=7ffe43ccf651 items=2 ppid=439 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="sshd" exe="/usr/sbin/sshd" key=(null)
  2. type=EXECVE msg=audit(1531967949.881:171): argc=3 a0="/usr/sbin/sshd" a1="-D" a2="-R"
  3. type=CWD msg=audit(1531967949.881:171): cwd="/"
  4. type=PATH msg=audit(1531967949.881:171): item=0 name="/usr/sbin/sshd" inode=145941 dev=08:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 nametype=NORMAL
  5. type=PATH msg=audit(1531967949.881:171): item=1 name=(null) inode=393295 dev=08:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 nametype=NORMAL
  6. type=PROCTITLE msg=audit(1531967949.881:171): proctitle=2F7573722F7362696E2F73736864002D44002D52
  7. type=USER_ACCT msg=audit(1531967951.001:172): pid=2440 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="srashid" exe="/usr/sbin/sshd" hostname=c-73-162-112-222.hsd1.ca.comcast.net addr=73.162.112.208 terminal=ssh res=success'
  8. type=CRED_ACQ msg=audit(1531967951.001:173): pid=2440 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="srashid" exe="/usr/sbin/sshd" hostname=c-73-162-112-222.hsd1.ca.comcast.net addr=73.162.112.208 terminal=ssh res=success'
  9. type=LOGIN msg=audit(1531967951.005:174): pid=2440 uid=0 old-auid=4294967295 auid=1000 old-ses=4294967295 ses=3 res=1
  10. type=CONFIG_CHANGE msg=audit(1531967951.005:175): pid=2440 uid=0 auid=1000 ses=3 op=tty_set old-enabled=0 new-enabled=1 old-log_passwd=0 new-log_passwd=0 res=1
  11. type=USER_START msg=audit(1531967951.005:176): pid=2440 uid=0 auid=1000 ses=3 msg='op=PAM:session_open acct="srashid" exe="/usr/sbin/sshd" hostname=c-73-162-112-222.hsd1.ca.comcast.net addr=73.162.112.208 terminal=ssh res=success'
  12. type=CRED_ACQ msg=audit(1531967951.009:177): pid=2443 uid=0 auid=1000 ses=3 msg='op=PAM:setcred acct="srashid" exe="/usr/sbin/sshd" hostname=c-73-162-112-222.hsd1.ca.comcast.net addr=73.162.112.208 terminal=ssh res=success'
Add Comment
Please, Sign In to add comment