| 1 |
11/14/2012 10:39:16.131:8805 |
DAEMON_START |
|
912 |
|
success |
auditd start, ver=2.2 format=raw kernel=2.6.32-279.el6.x86_64 auid=unset pid=912 subj=system_u:system_r:auditd_t:s0 res=success |
| 2 |
11/14/2012 10:39:16.268:4 |
CONFIG_CHANGE |
|
|
|
1 |
audit_backlog_limit=320 old=64 auid=unset ses=unset subj=system_u:system_r:auditctl_t:s0 res=1 |
| 3 |
11/14/2012 10:40:20.780:5 |
USER_AUTH |
root |
1081 |
/bin/login |
failed |
user pid=1081 uid=root auid=unset ses=unset subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe=/bin/login hostname=? addr=? terminal=tty1 res=failed' |