file,2005-10-18 06:29:22.541 -04:00,/var/audit/20051014102249.20051018102922.spartacus.wjs.org
header,94,2,su,,spartacus.wjs.org,2005-10-18 06:32:11.259 -04:00
subject,wsalamon,root,other,wsalamon,other,1555,1767455497,14252 22 homer.wjs.org
text,success for user root
return,success,0
header,240,2,setppriv(2),,spartacus.wjs.org,2005-10-18 06:33:28.869 -04:00
argument,2,0x2,op
privilege,Inheritable,file_link_any,proc_exec,proc_fork,proc_info,proc_session
privilege,Inheritable,file_link_any,proc_exec,proc_fork,proc_info,proc_session
subject,audit,root,other,root,other,1568,1349428981,14252 65559 homer.wjs.org
return,success,0
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:28.877 -04:00
argument,0,0x621,child PID
subject,audit,root,other,root,other,1568,1349428981,14252 65559 homer.wjs.org
return,success,0
header,108,2,old setuid(2),,spartacus.wjs.org,2005-10-18 06:33:28.887 -04:00
argument,1,0x65,uid
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
use of privilege,successful use of priv,proc_setid
return,success,0
header,129,2,chdir(2),,spartacus.wjs.org,2005-10-18 06:33:28.887 -04:00
path,/home/audit
attribute,40755,audit,other,136,359557,0
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,131,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:28.907 -04:00
path,/usr/bin/bash
attribute,100555,root,bin,136,20880,0
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,119,2,chdir(2),,spartacus.wjs.org,2005-10-18 06:33:28.921 -04:00
path,/
attribute,40755,root,root,136,2,0
subject,audit,root,other,root,other,1568,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:28.940 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:28.941 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:28.941 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:28.941 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:28.951 -04:00
argument,0,0x622,child PID
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,148,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:28.963 -04:00
path,/usr/sbin/usr/lib/fs/ufs/quota
attribute,104555,root,bin,136,522,0
subject,audit,root,other,audit,other,1570,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,exit(2),,spartacus.wjs.org,2005-10-18 06:33:28.985 -04:00
subject,audit,root,other,audit,other,1570,1349428981,14252 65559 homer.wjs.org
return,success,0
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:28.989 -04:00
argument,0,0x623,child PID
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,130,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:29.001 -04:00
path,/usr/bin/cat
attribute,100555,root,bin,136,249,0
subject,audit,audit,other,audit,other,1571,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,exit(2),,spartacus.wjs.org,2005-10-18 06:33:29.014 -04:00
subject,audit,audit,other,audit,other,1571,1349428981,14252 65559 homer.wjs.org
return,success,0
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:29.017 -04:00
argument,0,0x624,child PID
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,131,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:29.030 -04:00
path,/usr/bin/mail
attribute,102511,root,mail,136,343,0
subject,audit,audit,mail,audit,other,1572,1349428981,14252 65559 homer.wjs.org
return,success,0
header,93,2,setegid(2),,spartacus.wjs.org,2005-10-18 06:33:29.052 -04:00
argument,1,0x1,gid
subject,audit,audit,other,audit,other,1572,1349428981,14252 65559 homer.wjs.org
return,success,0
header,93,2,setegid(2),,spartacus.wjs.org,2005-10-18 06:33:29.053 -04:00
argument,1,0x6,gid
subject,audit,audit,mail,audit,other,1572,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,exit(2),,spartacus.wjs.org,2005-10-18 06:33:29.054 -04:00
subject,audit,audit,mail,audit,other,1572,1349428981,14252 65559 homer.wjs.org
return,success,0
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:29.068 -04:00
argument,0,0x625,child PID
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:29.081 -04:00
argument,0,0x626,child PID
subject,audit,audit,other,audit,other,1573,1349428981,14252 65559 homer.wjs.org
return,success,0
header,135,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:29.093 -04:00
path,/usr/bin/hostname
attribute,100555,root,bin,136,320,0
subject,audit,audit,other,audit,other,1574,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:29.100 -04:00
subject,audit,audit,other,audit,other,1574,1349428981,14252 65559 homer.wjs.org
return,success,1569
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:29.100 -04:00
subject,audit,audit,other,audit,other,1574,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:29.106 -04:00
argument,0,0x627,child PID
subject,audit,audit,other,audit,other,1574,1349428981,14252 65559 homer.wjs.org
return,success,0
header,137,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:29.114 -04:00
path,/usr/bin/sbin/uname
attribute,100555,root,bin,136,1677,0
subject,audit,audit,other,audit,other,1575,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,exit(2),,spartacus.wjs.org,2005-10-18 06:33:29.124 -04:00
subject,audit,audit,other,audit,other,1575,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,exit(2),,spartacus.wjs.org,2005-10-18 06:33:29.129 -04:00
subject,audit,audit,other,audit,other,1574,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,exit(2),,spartacus.wjs.org,2005-10-18 06:33:29.133 -04:00
subject,audit,audit,other,audit,other,1573,1349428981,14252 65559 homer.wjs.org
return,success,0
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:29.141 -04:00
argument,0,0x628,child PID
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,131,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:29.155 -04:00
path,/usr/bin/echo
attribute,100555,root,bin,136,290,0
subject,audit,audit,other,audit,other,1576,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,exit(2),,spartacus.wjs.org,2005-10-18 06:33:29.166 -04:00
subject,audit,audit,other,audit,other,1576,1349428981,14252 65559 homer.wjs.org
return,success,0
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:29.168 -04:00
argument,0,0x629,child PID
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,131,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:29.181 -04:00
path,/usr/bin/echo
attribute,100555,root,bin,136,290,0
subject,audit,audit,other,audit,other,1577,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,exit(2),,spartacus.wjs.org,2005-10-18 06:33:29.189 -04:00
subject,audit,audit,other,audit,other,1577,1349428981,14252 65559 homer.wjs.org
return,success,0
header,129,2,chdir(2),,spartacus.wjs.org,2005-10-18 06:33:29.204 -04:00
path,/home/audit
attribute,40755,audit,other,136,359557,0
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:29.205 -04:00
argument,0,0x62a,child PID
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,131,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:29.218 -04:00
path,/usr/bin/echo
attribute,100555,root,bin,136,290,0
subject,audit,audit,other,audit,other,1578,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,exit(2),,spartacus.wjs.org,2005-10-18 06:33:29.227 -04:00
subject,audit,audit,other,audit,other,1578,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:29.238 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:30.460 -04:00
argument,0,0x62b,child PID
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:30.467 -04:00
subject,audit,audit,other,audit,other,1579,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:30.467 -04:00
subject,audit,audit,other,audit,other,1579,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,129,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:30.473 -04:00
path,/usr/bin/ls
attribute,100555,root,bin,136,341,0
subject,audit,audit,other,audit,other,1579,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),fe,spartacus.wjs.org,2005-10-18 06:33:30.481 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,failure: Permission denied,-1
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:30.481 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,81,2,exit(2),,spartacus.wjs.org,2005-10-18 06:33:30.492 -04:00
subject,audit,audit,other,audit,other,1579,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:30.494 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:30.495 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:32.310 -04:00
argument,0,0x62c,child PID
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:32.318 -04:00
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:32.318 -04:00
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,138,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:32.324 -04:00
path,/home/audit/tprocess
attribute,100755,audit,other,136,359579,0
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),fe,spartacus.wjs.org,2005-10-18 06:33:32.330 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,failure: Permission denied,-1
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:32.331 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,150,2,setgroups(2),fe,spartacus.wjs.org,2005-10-18 06:33:32.331 -04:00
argument,1,0x0,setgroups
argument,1,0x3,setgroups
argument,1,0x4,setgroups
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
use of privilege,failed use of priv,proc_setid
return,failure: Not owner,-1
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:32.334 -04:00
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
return,success,0
header,108,2,old setgid(2),fe,spartacus.wjs.org,2005-10-18 06:33:32.335 -04:00
argument,1,0x63,gid
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
use of privilege,failed use of priv,proc_setid
return,failure: Not owner,-1
header,108,2,setegid(2),fe,spartacus.wjs.org,2005-10-18 06:33:32.335 -04:00
argument,1,0x63,gid
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
use of privilege,failed use of priv,proc_setid
return,failure: Not owner,-1
header,102,2,seteuid(2),fe,spartacus.wjs.org,2005-10-18 06:33:32.335 -04:00
argument,1,0x0,euid
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
use of privilege,failed use of priv,ALL
return,failure: Not owner,-1
header,108,2,old setuid(2),fe,spartacus.wjs.org,2005-10-18 06:33:32.338 -04:00
argument,1,0x63,uid
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
use of privilege,failed use of priv,proc_setid
return,failure: Not owner,-1
header,81,2,setpgrp(2),fe,spartacus.wjs.org,2005-10-18 06:33:32.339 -04:00
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
return,failure: Not owner,-1
header,112,2,priocntlsys(2),,spartacus.wjs.org,2005-10-18 06:33:32.340 -04:00
argument,1,0x1,pc_version
argument,3,0x6,cmd
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
return,success,0
header,137,2,kill(2),,spartacus.wjs.org,2005-10-18 06:33:32.341 -04:00
argument,2,0x10,signal
process,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
return,success,0
header,112,2,kill(2),,spartacus.wjs.org,2005-10-18 06:33:32.341 -04:00
argument,2,0x11,signal
argument,1,0x0,process
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,exit(2),,spartacus.wjs.org,2005-10-18 06:33:32.342 -04:00
subject,audit,audit,other,audit,other,1580,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:32.343 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:32.344 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:36.184 -04:00
argument,0,0x62d,child PID
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:36.191 -04:00
subject,audit,audit,other,audit,other,1581,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:36.192 -04:00
subject,audit,audit,other,audit,other,1581,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,129,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:36.197 -04:00
path,/usr/bin/ls
attribute,100555,root,bin,136,341,0
subject,audit,audit,other,audit,other,1581,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),fe,spartacus.wjs.org,2005-10-18 06:33:36.200 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,failure: Permission denied,-1
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:36.201 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,81,2,exit(2),,spartacus.wjs.org,2005-10-18 06:33:36.217 -04:00
subject,audit,audit,other,audit,other,1581,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:36.219 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:36.219 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:45.011 -04:00
argument,0,0x62e,child PID
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:45.018 -04:00
subject,audit,audit,other,audit,other,1582,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:45.018 -04:00
subject,audit,audit,other,audit,other,1582,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,129,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:45.024 -04:00
path,/usr/bin/su
attribute,104555,root,sys,136,401,0
subject,audit,root,other,audit,other,1582,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),fe,spartacus.wjs.org,2005-10-18 06:33:45.030 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,failure: Permission denied,-1
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:45.031 -04:00
subject,audit,audit,other,audit,other,1569,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,240,2,setppriv(2),,spartacus.wjs.org,2005-10-18 06:33:47.653 -04:00
argument,2,0x2,op
privilege,Inheritable,file_link_any,proc_exec,proc_fork,proc_info,proc_session
privilege,Inheritable,file_link_any,proc_exec,proc_fork,proc_info,proc_session
subject,audit,root,other,audit,other,1582,1349428981,14252 65559 homer.wjs.org
return,success,0
header,94,2,su,,spartacus.wjs.org,2005-10-18 06:33:47.667 -04:00
subject,audit,root,other,audit,other,1582,1349428981,14252 65559 homer.wjs.org
text,success for user root
return,success,0
header,108,2,old setgid(2),,spartacus.wjs.org,2005-10-18 06:33:47.673 -04:00
argument,1,0x0,gid
subject,audit,root,root,audit,root,1582,1349428981,14252 65559 homer.wjs.org
use of privilege,successful use of priv,proc_setid
return,success,0
header,294,2,setgroups(2),,spartacus.wjs.org,2005-10-18 06:33:47.676 -04:00
argument,1,0x0,setgroups
argument,1,0x1,setgroups
argument,1,0x2,setgroups
argument,1,0x3,setgroups
argument,1,0x4,setgroups
argument,1,0x5,setgroups
argument,1,0x6,setgroups
argument,1,0x7,setgroups
argument,1,0x8,setgroups
argument,1,0x9,setgroups
argument,1,0xc,setgroups
subject,audit,root,root,audit,root,1582,1349428981,14252 65559 homer.wjs.org
use of privilege,successful use of priv,proc_setid
return,success,0
header,108,2,old setuid(2),,spartacus.wjs.org,2005-10-18 06:33:47.676 -04:00
argument,1,0x0,uid
subject,audit,root,root,root,root,1582,1349428981,14252 65559 homer.wjs.org
use of privilege,successful use of priv,proc_setid
return,success,0
header,126,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:47.690 -04:00
path,/sbin/sh
attribute,100555,root,root,136,1668,0
subject,audit,root,root,root,root,1582,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:47.697 -04:00
subject,audit,root,root,root,root,1582,1349428981,14252 65559 homer.wjs.org
return,success,1582
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:47.697 -04:00
subject,audit,root,root,root,root,1582,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:47.702 -04:00
subject,audit,root,root,root,root,1582,1349428981,14252 65559 homer.wjs.org
return,success,0
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:48.872 -04:00
argument,0,0x62f,child PID
subject,audit,root,root,root,root,1582,1349428981,14252 65559 homer.wjs.org
return,success,0
header,131,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:48.879 -04:00
path,/usr/bin/bash
attribute,100555,root,bin,136,20880,0
subject,audit,root,root,root,root,1583,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:48.908 -04:00
subject,audit,root,root,root,root,1583,1349428981,14252 65559 homer.wjs.org
return,success,1582
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:48.909 -04:00
subject,audit,root,root,root,root,1583,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:48.909 -04:00
subject,audit,root,root,root,root,1583,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:48.909 -04:00
subject,audit,root,root,root,root,1583,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:48.921 -04:00
subject,audit,root,root,root,root,1583,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,99,2,fork1(2),,spartacus.wjs.org,2005-10-18 06:33:55.336 -04:00
argument,0,0x630,child PID
subject,audit,root,root,root,root,1583,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:55.344 -04:00
subject,audit,root,root,root,root,1584,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:55.344 -04:00
subject,audit,root,root,root,root,1584,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:55.346 -04:00
subject,audit,root,root,root,root,1583,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:55.347 -04:00
subject,audit,root,root,root,root,1583,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,135,2,execve(2),,spartacus.wjs.org,2005-10-18 06:33:55.379 -04:00
path,/usr/sbin/praudit
attribute,100555,root,bin,136,751,0
subject,audit,root,root,root,root,1584,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,exit(2),,spartacus.wjs.org,2005-10-18 06:33:56.050 -04:00
subject,audit,root,root,root,root,1584,1349428981,14252 65559 homer.wjs.org
return,success,0
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:56.053 -04:00
subject,audit,root,root,root,root,1583,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:33:56.053 -04:00
subject,audit,root,root,root,root,1583,1349428981,14252 65559 homer.wjs.org
return,success,1568
header,81,2,setpgrp(2),,spartacus.wjs.org,2005-10-18 06:34:40.488 -04:00
subject,audit,root,root,root,root,1583,1349428981,14252 65559 homer.wjs.org
return,success,1568
file,2005-10-18 06:34:42.362 -04:00,/var/audit/20051018103442.not_terminated.spartacus.wjs.org