audit.log fix errant text

jtmoon79 · May 9, 2023 · 69ef9f7 · 69ef9f7
1 parent c8b56fc
commit 69ef9f7
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/logs/RedHatEnterprise9/audit/audit.log b/logs/RedHatEnterprise9/audit/audit.log
@@ -11,9 +11,9 @@ type=SYSCALL msg=audit(1681160194.293:8): arch=c000003e syscall=44 success=yes e
 type=SERVICE_START msg=audit(1683526166.863:495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
 type=SERVICE_STOP msg=audit(1683526197.112:496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
 type=USER_START msg=audit(1683526166.630:481): pid=13871 uid=0 auid=0 ses=7 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
-type=CRED_ACQ msg=audit(1683526166.749:489): pid=13890 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.124.180 addr=192.168.124.180 terminal=ssh res=success'UID="root" AUID="root"
-type=USER_LOGIN msg=audit(1683526166.810:490): pid=13862 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.124.180 terminal=/dev/pts/1 res=success'UID="root" AUID="root" ID="root"
-type=USER_START msg=audit(1683526166.810:491): pid=13862 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.124.180 terminal=/dev/pts/1 res=success'UID="root" AUID="root" ID="root"
+type=CRED_ACQ msg=audit(1683526166.749:489): pid=13890 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.1.8 addr=192.168.1.8 terminal=ssh res=success'UID="root" AUID="root"
+type=USER_LOGIN msg=audit(1683526166.810:490): pid=13862 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=/dev/pts/1 res=success'UID="root" AUID="root" ID="root"
+type=USER_START msg=audit(1683526166.810:491): pid=13862 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=/dev/pts/1 res=success'UID="root" AUID="root" ID="root"
 type=CRYPTO_KEY_USER msg=audit(1683526166.814:492): pid=13862 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:34:76:7b:a4:dc:bb:e0:b6:5e:5d:73:e9:a1:db:89:21:c0:0d:ca:54:f4:7d:46:9c:b2:87:c4:ed:0b:d4:3f:59 direction=? spid=13900 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
 type=BPF msg=audit(1683526197.145:497): prog-id=0 op=UNLOAD
 type=BPF msg=audit(1683526197.145:498): prog-id=0 op=UNLOAD