AUDIT_LOGIN vs AUDIT_USER_LOGIN

Fri Jul 31 14:12:14 UTC 2015

It just means Audit Login Context is set...

http://lxr.free-electrons.com/source/kernel/auditsc.c#L1991

I actually see that event when I ssh.

On Fri, Jul 31, 2015 at 9:59 AM, Satish Chandra Kilaru <iam.kilaru at gmail.com
> wrote:

>
> I see AUDIT_USER_LOGIN when I ssh to a linux machine. What action will
> cause AUDIT_LOGIN  event?
>
> --
> Please Donate to www.wikipedia.org
>

-- 
Please Donate to www.wikipedia.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20150731/2b27219a/attachment.htm>