F22: Logwatch messages

Steven Stern subscribed-lists at sterndata.com
Fri Jun 5 12:10:52 UTC 2015


Every morning, I'm seeing a bunch of audit messages in logwatch reports.
 Since these seem to be non-errors, why is logwatch reporting them?

--------------------- Kernel Audit Begin ------------------------

 **Unmatched Entries** (Only first 100 out of 2002 are printed)
  <audit-1101> pid=19165 uid=0 auid=4294967295 ses=4294967295
msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser
acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron
res=success'
  <audit-1103> pid=19165 uid=0 auid=4294967295 ses=4294967295
msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root"
exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
  <audit-1101> pid=19166 uid=0 auid=4294967295 ses=4294967295
msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root"
exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  <audit-1105> pid=19166 uid=0 auid=4294967295 ses=4294967295
msg='op=PAM:session_open
grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root"
exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
-- 
-- Steve


More information about the users mailing list