Unable to login

James Morris jmorris at redhat.com
Sat Jun 11 15:40:46 UTC 2005


I'm unable to login to current rawhide and the 2.6.12-rc6 kernel, with 
auditd enabled.

I think these audit.log messages are the cause:

type=KERNEL msg=audit(1118503063.368:248607): SELinux:  unrecognized 
netlink message type=1100 for sclass=49 
type=KERNEL msg=audit(1118503063.368:248607): syscall=102 arch=40000003 
success=no exit=-22 a0=b a1=bfc3ab10 a2=7150f8 a3=66 items=0
 pid=1916 loginuid=-1 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 
fsgid=0 comm=login exe=/bin/login

No diagnostics are displayed on the console though.

Can auditd translate Unix epochs into human readable timestamps?



- James
-- 
James Morris
<jmorris at redhat.com>





More information about the Linux-audit mailing list