ausearch and terminal
Daniel J Walsh
dwalsh at redhat.com
Fri Jul 31 12:42:08 UTC 2009
On 07/30/2009 10:38 PM, Vadym Chepkov wrote:
> Hi,
>
> I observe a very strange behavior of the ausearch utility.
> audit-1.7.7-6.el5_3.3
>
> # cat /root/bin/autest.sh
> /sbin/ausearch -m avc| wc -l
>
> If I run it, I get expected results:
>
> # /root/bin/autest.sh
> 1563
>
> But if I run it from cron, I get this in e-mail:
>
> <no matches>
> 0
>
> Why??
>
> Sincerely yours,
> Vadym Chepkov
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Is cron being denied the ability to read the audit.log? Look for an AVC.
More information about the fedora-selinux-list
mailing list