OBJ_PID records

Steve Grubb sgrubb at redhat.com
Fri Sep 28 13:39:57 UTC 2007


On Friday 28 September 2007 09:31:09 Steve Grubb wrote:
> > > type=OBJ_PID msg=audit(09/20/2007 15:29:16.355:12775) : opid=2287  
> > > obj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023
> >
> > Er... And what has pid 2287 on that box?
>
> I am reasonably certain that its gdm given the selinux label.

Scratch that, I forgot to include "server" in my grep. That looks like Xorg's 
process label. So, its the X server.

-Steve




More information about the Linux-audit mailing list