Re: ausearch and terminal

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I figured it out, apparently you have to add switch --input-logs, when you run it from cron. Don't ask me why, I am puzzled myself.

Sincerely yours,
  Vadym Chepkov


--- On Fri, 7/31/09, Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote:

> From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
> Subject: Re: ausearch and terminal
> To: "Vadym Chepkov" <chepkov@xxxxxxxxx>
> Cc: "Fedora SELinux" <fedora-selinux-list@xxxxxxxxxx>
> Date: Friday, July 31, 2009, 8:42 AM
> On 07/30/2009 10:38 PM, Vadym Chepkov
> wrote:
> > Hi,
> > 
> > I observe a very strange behavior of the ausearch
> utility.
> > audit-1.7.7-6.el5_3.3
> > 
> > # cat /root/bin/autest.sh  
> > /sbin/ausearch -m avc| wc -l
> > 
> > If I run it, I get expected results:
> > 
> > # /root/bin/autest.sh 
> > 1563
> > 
> > But if I run it from cron, I get this in e-mail:
> > 
> > <no matches>
> > 0
> > 
> > Why??
> > 
> > Sincerely yours,
> >   Vadym Chepkov
> > 
> > --
> > fedora-selinux-list mailing list
> > fedora-selinux-list@xxxxxxxxxx
> > https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> Is cron being denied the ability to read the
> audit.log?  Look for an AVC.
> 

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux