OBJ_PID records
Steve Grubb
sgrubb at redhat.com
Fri Sep 28 13:39:57 UTC 2007
On Friday 28 September 2007 09:31:09 Steve Grubb wrote:
> > > type=OBJ_PID msg=audit(09/20/2007 15:29:16.355:12775) : opid=2287
> > > obj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023
> >
> > Er... And what has pid 2287 on that box?
>
> I am reasonably certain that its gdm given the selinux label.
Scratch that, I forgot to include "server" in my grep. That looks like Xorg's
process label. So, its the X server.
-Steve
More information about the Linux-audit
mailing list