Re: audit watch rules and docker containers

2018-03-04 Thread Rakesh
" exe="/lib/systemd/systemd-cgroups-agent" key="connect" Bit it's the watch events which are not working. Thanks,Rakesh From: Steve Grubb <sgr...@redhat.com> To: Rakesh <rak...@yahoo.com> Cc: "linux-audit@redhat.com" <linux-audit@redhat

Re: audit watch rules and docker containers

2018-03-05 Thread Rakesh
the mnt space to be shared between the host and the privileged container. Is this use case even being considered? Thanks, Rakesh From: Richard Guy Briggs <r...@redhat.com> To: Rakesh <rak...@yahoo.com> Cc: "linux-audit@redhat.com" <lin

audit watch rules and docker containers

2018-03-03 Thread Rakesh
  2 16:47 net -> net:[4026531957]lrwxrwxrwx 1 root root 0 Mar  2 16:47 ipc -> ipc:[4026531839]lrwxrwxrwx 1 root root 0 Mar  2 16:47 cgroup -> cgroup:[4026531835] Can someone suggest on how to make this work. Thanks,Rakesh-- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit

audit watch rules and docker containers

2018-03-03 Thread Rakesh
t root 0 Mar  2 16:47 net -> net:[4026531957]lrwxrwxrwx 1 root root 0 Mar  2 16:47 ipc -> ipc:[4026531839]lrwxrwxrwx 1 root root 0 Mar  2 16:47 cgroup -> cgroup:[4026531835] Can someone please suggest with some thoughts on how to make this work. Thanks,Rakesh -- Linux-audit mailing list Lin

Re: auditd not logging proper log.

2021-07-29 Thread Rakesh Kumar
Pheba Sent from Yahoo Mail on Android On Sat, Jul 10, 2021 at 19:57, Steve Grubb wrote: On Saturday, July 10, 2021 2:28:55 AM EDT Rakesh Kumar wrote: > 1)I am trying to run the auditd (start/stop)  without root user as normal > user , how to achieve this on linux.? For security r

Re: auditd not logging proper log.

2021-07-29 Thread Rakesh Kumar
Sent from Yahoo Mail on Android On Sat, Jul 10, 2021 at 19:57, Steve Grubb wrote: On Saturday, July 10, 2021 2:28:55 AM EDT Rakesh Kumar wrote: > 1)I am trying to run the auditd (start/stop)  without root user as normal > user , how to achieve this on linux.? For security r

Re: auditd not logging proper log.

2021-08-08 Thread Rakesh Kumar
file . Where should i investigate.?  Regards,RakeshOn Sunday, August 8, 2021, 07:12:17 PM GMT+5:30, Steve Grubb wrote: On Saturday, August 7, 2021 12:47:56 AM EDT Rakesh Kumar wrote: > 1)I am using this version of auditctl version 2.4.4 . So does this version > has the user

Re: auditd not logging proper log.

2021-08-08 Thread Rakesh Kumar
Or do i need any specific rules in the /etc/auditd/rules.d/audit.rules for this login/logout info to be logged ,?  if yes then please suggest on this. RakeshOn Sunday, August 8, 2021, 11:18:00 PM GMT+5:30, Rakesh Kumar wrote: Hi Team, The user login/logout information is being

Re: auditd not logging proper log.

2021-08-07 Thread Rakesh Kumar
will be happy to share that file.or if it needs other pam file to check also please let me know that also. As i see in my system that [kauditd] is running so it log all login info. Please help me on this . Regards,RakeshOn Thursday, July 29, 2021, 09:49:03 PM GMT+5:30, Steve Grubb wrote

Re: auditd not logging proper log.

2021-07-29 Thread Rakesh Kumar
I did not get you, in kernel auditd is enabled like kauditd is running then what exactly we have to do changes in my system to get full login n log out info in audit. Log file.  Please help me in giving steps to follow.  Regards,Rakesh  Sent from Yahoo Mail on Android On Sat, Jul 10, 2021