audit log for starting the daemon

audit.log (text/plain), 3.24 KB, created by Matthew Thode ( prometheanfire ) on 2012-07-15 01:00:59 UTC

type=LOGIN msg=audit(1342312439.833:498): login pid=21392 uid=0 old auid=0 new auid=65534 old ses=13 new ses=21
type=AVC msg=audit(1342312439.854:499): avc:  denied  { create } for  pid=21393 comm="nslcd" name="socket" ipaddr=127.0.0.6 scontext=system_u:system_r:initrc_t tcontext=system_u:object_r:var_run_t tclass=sock_file
type=SYSCALL msg=audit(1342312439.854:499): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=386c6381990 a2=6e a3=656b636f732f6463 items=3 ppid=1 pid=21393 auid=65534 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="nslcd" exe="/usr/sbin/nslcd" subj=system_u:system_r:initrc_t key=(null)
type=SOCKADDR msg=audit(1342312439.854:499): saddr=01002F7661722F72756E2F6E736C63642F736F636B6574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
type=PATH msg=audit(1342312439.854:499): item=0 name=(null) inode=4278 dev=fd:03 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:var_run_t
type=PATH msg=audit(1342312439.854:499): item=1 name=(null) inode=4278 dev=fd:03 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:var_run_t
type=PATH msg=audit(1342312439.854:499): item=2 name=(null) inode=621 dev=fd:03 mode=0140755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:var_run_t
type=AVC msg=audit(1342312439.855:500): avc:  denied  { setattr } for  pid=21393 comm="nslcd" name="socket" dev="dm-3" ino=621 ipaddr=127.0.0.6 scontext=system_u:system_r:initrc_t tcontext=system_u:object_r:var_run_t tclass=sock_file
type=SYSCALL msg=audit(1342312439.855:500): arch=c000003e syscall=90 success=yes exit=0 a0=59fd0b0e57 a1=1b6 a2=1 a3=656b636f732f6463 items=1 ppid=1 pid=21393 auid=65534 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="nslcd" exe="/usr/sbin/nslcd" subj=system_u:system_r:initrc_t key=(null)
type=CWD msg=audit(1342312439.855:500):  cwd="/"
type=PATH msg=audit(1342312439.855:500): item=0 name="/var/run/nslcd/socket" inode=621 dev=fd:03 mode=0140755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:var_run_t

type=AVC msg=audit(1342312801.469:501): avc:  denied  { write } for  pid=21770 comm="cron" name="socket" dev="dm-3" ino=621 scontext=system_u:system_r:crond_t tcontext=system_u:object_r:var_run_t tclass=sock_file
type=AVC msg=audit(1342312801.469:501): avc:  denied  { connectto } for  pid=21770 comm="cron" path="/var/run/nslcd/socket" scontext=system_u:system_r:crond_t tcontext=system_u:system_r:initrc_t tclass=unix_stream_socket
type=SYSCALL msg=audit(1342312801.469:501): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=3b758093a10 a2=6e a3=3b758093730 items=1 ppid=21768 pid=21770 auid=65534 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="cron" exe="/usr/sbin/cron" subj=system_u:system_r:crond_t key=(null)
type=SOCKADDR msg=audit(1342312801.469:501): saddr=01002F7661722F72756E2F6E736C63642F736F636B6574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
type=PATH msg=audit(1342312801.469:501): item=0 name=(null) inode=621 dev=fd:03 mode=0140666 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:var_run_t