Need help, we are receiving type=SYSCALL with auid=unset event entries
Briane Lin
brlin at us.ibm.com
Tue Jun 3 20:28:40 UTC 2014
We are receiving LINUX RHEL versions 5 and 6 in our environment with
type=SYSCALL and auid=unset event types.
We are unable to properly monitor an event with AUID=unset, does anyone
know why we are currently seeing these and what is the resolution?
Thanks!
Briane Lin
IBM Global Technology Services - Americas
Identity and Access Management, Automation Solutions
(Email): brlin at us.ibm.com
(Office): (720) 395-2049
"The only easy day was yesterday."
- US Navy Seals -
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20140603/ec5e3453/attachment.htm>
More information about the Linux-audit
mailing list