Re: Couldn't get audit messages for 'listen' on kernel 4.19.0-6-686-pae
Rinat Gadelshin <[email protected]> Mon, 23 Oct 2023 16:06:16 +0300
| Newsgroups | com.redhat.linux-audit |
|---|---|
| Message-ID | <[email protected]> |
SGVsbG8gdGhlcmUhCgpGaXJzdCBvZiBhbGwsIEkgaGF2ZSB0byBhcG9sb2dpemUgZm9yIHR3byBp ZGVudGljYWwgZW1haWxzIGFzIHRoZSAKYmVnaW5uaW5nIG9mIHRoZSBzdHJlYW0uClRoZSBmaXJz dCBvbmUgd2FzIHNlbnQgKGJ5IG9jY2FzaW9uYWwpIGZyb20gbXkgd29yayBlbWFpbC4KSSd2ZSBy ZWNlaXZlZCBub3RpZmljYXRpb24sIGZyb20gdGhlIG1haWwgYm90LCB0aGF0IEkgc2hvdWxkIHN1 YnNjcmliZSAKdG8gdGhlIG1haWwgbGlzdCAoZm9yIHRoZSB3b3JrIGVtYWlsKS4KQWZ0ZXIgdGhh dCBJJ3ZlIHJlc2VudCB0aGUgc2Vjb25kIG9uZS4KCkxldCdzIHJldHVybiB0byB0aGUgcHJvYmxl bS4KCkkndmUgZG9uZSBhIGZvbGxvd2luZyBleHBlcmltZW50OgoKYGF1ZGl0Y3RsIC1EYApgYXVk aXRjdGwgLWEgYWx3YXlzLGV4aXQgLVMgYWxsYApgc3RyYWNlIG5ldGNhdCAtdiAtbCAtcCA0MjQy IHwgdGVlIHN0cmFjZS5sb2dgICMgdGhlIHBpZCBvZiB0aGUgbmV0Y2F0IAp3YXMgNTM2CkN0cmwr YwpgYXVzZWFyY2ggLXAgNTM2ID4gYXVkaXRkLnBpZC41MzYubG9nYApgZ3JlcCAic3lzY2FsbD0u KnRyYWRpdGlvbmFsIiBhdWRpdGQucGlkLjUzNi5sb2cgfCBhd2sgJ3twcmludCAkNH0nIHwgCnNv cnQgfCB1bmlxIC1jJwoKVGhlIGxhc3QgY29tbWFuZCBwcmludHMgdGhlIGZvbGxvd2luZyByZXN1 bHQ6CgogwqDCoMKgwqAgMTEgc3lzY2FsbD0xMDIKIMKgwqDCoMKgwqAgMSBzeXNjYWxsPTExCiDC oMKgwqDCoMKgIDYgc3lzY2FsbD0xMjUKIMKgwqDCoMKgwqAgNiBzeXNjYWxsPTE0MAogwqDCoMKg wqDCoCA2IHN5c2NhbGw9MTc0CiDCoMKgwqDCoMKgIDEgc3lzY2FsbD0xNzUKIMKgwqDCoMKgIDE0 IHN5c2NhbGw9MTkyCiDCoMKgwqDCoCAzMyBzeXNjYWxsPTE5NQogwqDCoMKgwqDCoCA5IHN5c2Nh bGw9MTk3CiDCoMKgwqDCoMKgIDIgc3lzY2FsbD0yMAogwqDCoMKgwqDCoCAxIHN5c2NhbGw9MjQz CiDCoMKgwqDCoMKgIDEgc3lzY2FsbD0yNwogwqDCoMKgwqAgNDEgc3lzY2FsbD0yOTUKIMKgwqDC oMKgIDE0IHN5c2NhbGw9MwogwqDCoMKgwqDCoCA1IHN5c2NhbGw9MzMKIMKgwqDCoMKgwqAgMiBz eXNjYWxsPTQKIMKgwqDCoMKgwqAgNSBzeXNjYWxsPTQ1CiDCoMKgwqDCoCAxMSBzeXNjYWxsPTYK IMKgwqDCoMKgwqAgMyBzeXNjYWxsPTkxCgpTbyB0aGUgZm9sbG93aW5nIHN5c2NhbGxzIGFyZSBy ZXBvcnRlZCAodGhlcmUgYXJlIG5vIGBzb2NrZXRgLCBgYmluZGAsIApgY29ubmVjdGAsIGBsaXN0 ZW5gKToKCiDCoMKgwqAgMyAocmVhZCkKIMKgwqDCoCA0ICh3cml0ZSkKIMKgwqDCoCA2IChjbG9z ZSkKIMKgwqDCoCAxMSAoZXhlY3ZlKQogwqDCoMKgIDIwIChnZXRwaWQpCiDCoMKgwqAgMjcgKGFs YXJtKQogwqDCoMKgIDMzIChhY2Nlc3MpCiDCoMKgwqAgNDUgKGJyaykKIMKgwqDCoCA5MSAobXVu bWFwKQogwqAgMTAyIChzb2NrZXRjYWxsKQogwqAgMTI1wqAobXByb3RlY3QpCiDCoCAxNDDCoChf bGxzZWVrKQogwqAgMTc0wqAocnRfc2lnYWN0aW9uKQogwqAgMTc1wqAocnRfc2lncHJvY21hc2sp CiDCoCAxOTLCoChtbWFwMikKIMKgIDE5NcKgKHN0YXQ2NCkKIMKgIDE5N8KgKGZzdGF0NjQpCiDC oCAyNDPCoChzZXRfdGhyZWFkX2FyZWEpCiDCoCAyOTXCoChvcGVuYXQpCgpCdXQgc3RyYWNlJ3Mg bG9nIHNob3dzIHRoYXQgYHNvY2tldGAsIGBiaW5kYCwgYGNvbm5lY3RgIGFuZCBgbGlzdGVuYCAK d2VyZSBjYWxsZWQ6CgogwqDCoMKgIGV4ZWN2ZSgiL3Vzci9iaW4vbmV0Y2F0IiwgWyJuZXRjYXQi LCAiLXYiLCAiLWwiLCAiLXAiLCAiNDI0MiJdLCAKMHhiZjlmOGYwMCAvKiAyMiB2YXJzICovKSA9 IDAKIMKgwqDCoCAtLSBsaW5lIHNraXBwZWQgLS0KIMKgwqDCoCBzb2NrZXQoQUZfVU5JWCwgU09D S19TVFJFQU18U09DS19DTE9FWEVDfFNPQ0tfTk9OQkxPQ0ssIDApID0gMwogwqDCoCDCoGNvbm5l Y3QoMywge3NhX2ZhbWlseT1BRl9VTklYLCBzdW5fcGF0aD0iL3Zhci9ydW4vbnNjZC9zb2NrZXQi fSwgCjExMCkgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3RvcnkpCiDCoMKgIMKg Y2xvc2UoMynCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoMKgwqDCoCA9IDAKIMKgwqDCoCAtLSBsaW5lIHNraXBwZWQgLS0KIMKgwqDCoCBzb2Nr ZXQoQUZfVU5JWCwgU09DS19TVFJFQU18U09DS19DTE9FWEVDfFNPQ0tfTk9OQkxPQ0ssIDApID0g MwogwqDCoCDCoGNvbm5lY3QoMywge3NhX2ZhbWlseT1BRl9VTklYLCBzdW5fcGF0aD0iL3Zhci9y dW4vbnNjZC9zb2NrZXQifSwgCjExMCkgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJl Y3RvcnkpCiDCoMKgIMKgY2xvc2UoMynCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCA9IDAKIMKgwqDCoCAtLSBsaW5lIHNraXBwZWQg LS0KIMKgwqDCoCBzb2NrZXQoQUZfSU5FVCwgU09DS19TVFJFQU0sIElQUFJPVE9fVENQKSA9IDMK IMKgwqAgwqBzZXRzb2Nrb3B0KDMsIFNPTF9TT0NLRVQsIFNPX1JFVVNFQUREUiwgWzFdLCA0KSA9 IDAKIMKgwqAgwqBzZXRzb2Nrb3B0KDMsIFNPTF9TT0NLRVQsIFNPX1JFVVNFUE9SVCwgWzFdLCA0 KSA9IDAKIMKgwqAgwqBiaW5kKDMsIHtzYV9mYW1pbHk9QUZfSU5FVCwgc2luX3BvcnQ9aHRvbnMo NDI0MiksIApzaW5fYWRkcj1pbmV0X2FkZHIoIjAuMC4wLjAiKX0sIDE2KSA9IDAKIMKgwqAgwqBs aXN0ZW4oMywgMSnCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqAgPSAwCiDCoMKgIMKgZ2V0c29ja25hbWUoMywge3NhX2ZhbWlseT1BRl9JTkVULCBz aW5fcG9ydD1odG9ucyg0MjQyKSwgCnNpbl9hZGRyPWluZXRfYWRkcigiMC4wLjAuMCIpfSwgWzE2 XSkgPSAwCiDCoMKgwqAgLS0gbGluZSBza2lwcGVkIC0tCgpQbGVhc2UsIGdpdmUgbWUgYSBjbHVl ISBIb3cgY291bGQgaXQgYmU/CgpCZXN0IHJlZ2FyZHMKUmluYXQKCk9uIDIyLjEwLjIwMjMgMDg6 MjcsIFJpbmF0IEdhZGVsc2hpbiB3cm90ZToKPiBIZWxsbyB0aGVyZSEKPgo+IEknbSBmYWNpbmcg YSBzdHJhbmdlIHByb2JsZW0uCj4gSSBoYXZlIG5vdCBiZWVuIGFibGUgdG8gZ2V0IGF1ZGl0IHJl cG9ydHMgZm9yIGFueSAibmV0d29yayIgc3lzY2FsbAo+IG9uIG9uZSBvZiB0aGUgY29tcHV0ZXJz IGZyb20gbXkgdGVzdCBiZW5jaC4KPiBJIG1lYW4gJ2Nvbm5lY3QnLCAnYWNjZXB0NCcsICdsaXN0 ZW4nLCAnYmluZCcsICdzb2NrZXQnLgo+IFRoZSBmb2xsb3dpbmcgZXhhbXBsZSBzaG93cyB0aGF0 IGF1ZGl0ZCBjb3VsZG4ndCBnZXQgdGhlbSB0b28gCj4gKCdsaXN0ZW4nIGF0IGxlYXN0KS4KPiBC dXQgSSd2ZSByZWNlaXZlZCBhIHJlcG9ydCBhYm91dCAnZXhlY3ZlJyBjYWxsZWQgYnkgdGhlIHNh bWUgcHJvY2Vzcy4KPgo+IENvdWxkIHlvdSB0ZWxsIG1lIHdoYXQgY2FuIEkgZG8gaW4gb3JkZXIg dG8gcmVjZWl2ZSBhdWRpdCBtZXNzYWdlcyBmb3IgCj4gdGhlIHN5c2NhbGxzLgo+IGZyb20gdGhp cyB2ZXJzaW9uIG9mIHRoZSBrZXJuZWw/Cj4KPiBBbnkgaGVscCB3aWxsIGJlIHdpbGwgYmUgYXBw cmVjaWF0ZWQuCj4KPgo+IHJvb3RAZGViMTAxLXg4Ni0wMDA5On4jIG5ldGNhdCAtdiAtbCAtcCA0 MjQyICYKPiBbMl0gMTM0ODEKPiByb290QGRlYjEwMS14ODYtMDAwOTp+IyBsaXN0ZW5pbmcgb24g W2FueV0gNDI0MiAuLi4KPiByb290QGRlYjEwMS14ODYtMDAwOTp+IyBlY2hvICJUZXN0IiB8IG5j IC1xIDAgMTI3LjAuMC4xIDQyNDIKPiBjb25uZWN0IHRvIFsxMjcuMC4wLjFdIGZyb20gbG9jYWxo b3N0IFsxMjcuMC4wLjFdIDM2NjUwCj4gVGVzdAo+IHJvb3RAZGViMTAxLXg4Ni0wMDA5On4jIHNr aWxsIC1wIDEzNDgxCj4gWzJdK8KgIERvbmXCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoCBuZXRjYXQgLXYgLWwgLXAgNDI0Mgo+IHJvb3RAZGViMTAxLXg4Ni0wMDA5On4jIGF1 c2VhcmNoIC1wIDEzNDgxCj4gLS0tLQo+IHRpbWUtPkZyaSBPY3QgMjAgMjI6MDA6NDIgMjAyMwo+ IHR5cGU9UFJPQ1RJVExFIG1zZz1hdWRpdCgxNjk3ODI4NDQyLjYwMzoyNjk3KTogCj4gcHJvY3Rp dGxlPTZFNjU3NDYzNjE3NDAwMkQ3NjAwMkQ2QzAwMkQ3MDAwMzQzMjM0MzIKPiB0eXBlPVBBVEgg bXNnPWF1ZGl0KDE2OTc4Mjg0NDIuNjAzOjI2OTcpOiBpdGVtPTEgCj4gbmFtZT0iL2xpYi9sZC1s aW51eC5zby4yIiBpbm9kZT02NTUzODIgZGV2PWZlOjAwIG1vZGU9MDEwMDc1NSBvdWlkPTAgCj4g b2dpZD0wIHJkZXY9MDA6MDAgbmFtZXR5cGU9Tk9STUFMIGNhcF9mcD0wMDAwMDAwMDAwMDAwMDAw IAo+IGNhcF9maT0wMDAwMDAwMDAwMDAwMDAwIGNhcF9mZT0wIGNhcF9mdmVyPTAKPiB0eXBlPVBB VEggbXNnPWF1ZGl0KDE2OTc4Mjg0NDIuNjAzOjI2OTcpOiBpdGVtPTAgCj4gbmFtZT0iL3Vzci9i aW4vbmV0Y2F0IiBpbm9kZT02NjQ4ODcgZGV2PWZlOjAwIG1vZGU9MDEwMDc1NSBvdWlkPTAgCj4g b2dpZD0wIHJkZXY9MDA6MDAgbmFtZXR5cGU9Tk9STUFMIGNhcF9mcD0wMDAwMDAwMDAwMDAwMDAw IAo+IGNhcF9maT0wMDAwMDAwMDAwMDAwMDAwIGNhcF9mZT0wIGNhcF9mdmVyPTAKPiB0eXBlPUNX RCBtc2c9YXVkaXQoMTY5NzgyODQ0Mi42MDM6MjY5Nyk6IGN3ZD0iL3Jvb3QiCj4gdHlwZT1FWEVD VkUgbXNnPWF1ZGl0KDE2OTc4Mjg0NDIuNjAzOjI2OTcpOiBhcmdjPTUgYTA9Im5ldGNhdCIgYTE9 Ii12IiAKPiBhMj0iLWwiIGEzPSItcCIgYTQ9IjQyNDIiCj4gdHlwZT1TWVNDQUxMIG1zZz1hdWRp dCgxNjk3ODI4NDQyLjYwMzoyNjk3KTogYXJjaD00MDAwMDAwMyBzeXNjYWxsPTExIAo+IHN1Y2Nl c3M9eWVzIGV4aXQ9MCBhMD1lMzY0MDAgYTE9ZDlkOWUwIGEyPWUzYTMxMCBhMz01ODQ5ODggaXRl bXM9MiAKPiBwcGlkPTEyOTY4IHBpZD0xMzQ4MSBhdWlkPTAgdWlkPTAgZ2lkPTAgZXVpZD0wIHN1 aWQ9MCBmc3VpZD0wIGVnaWQ9MCAKPiBzZ2lkPTAgZnNnaWQ9MCB0dHk9cHRzMSBzZXM9NCBjb21t PSJuZXRjYXQiIAo+IGV4ZT0iL3Vzci9iaW4vbmMudHJhZGl0aW9uYWwiIHN1Ymo9PXVuY29uZmlu ZWQga2V5PShudWxsKQo+IHJvb3RAZGViMTAxLXg4Ni0wMDA5On4jIGF1ZGl0Y3RsIC1sCj4gLWEg YWx3YXlzLGV4aXQgLUYgYXJjaD1iMzIgLVMgZm9yayxleGVjdmUsY2xvbmUsdmZvcmssZXhlY3Zl YXQKPiAtYSBhbHdheXMsZXhpdCAtRiBhcmNoPWIzMiAtUyBiaW5kLGNvbm5lY3QsbGlzdGVuLGFj Y2VwdDQKPiByb290QGRlYjEwMS14ODYtMDAwOTp+IyBhdWRpdGN0bCAtcwo+IGVuYWJsZWQgMQo+ IGZhaWx1cmUgMQo+IHBpZCAxMzM5Mwo+IHJhdGVfbGltaXQgMAo+IGJhY2tsb2dfbGltaXQgODE5 Mgo+IGxvc3QgMAo+IGJhY2tsb2cgMAo+IGJhY2tsb2dfd2FpdF90aW1lIDAKPiBsb2dpbnVpZF9p bW11dGFibGUgMCB1bmxvY2tlZAo+IHJvb3RAZGViMTAxLXg4Ni0wMDA5On4jIHVuYW1lIC1hCj4g TGludXggZGViMTAxLXg4Ni0wMDA5LmF2cC5ydS5sb2NhbCA0LjE5LjAtNi02ODYtcGFlICMxIFNN UCBEZWJpYW4gCj4gNC4xOS42Ny0yK2RlYjEwdTIgKDIwMTktMTEtMTEpIGk2ODYgR05VL0xpbnV4 Cj4gcm9vdEBkZWIxMDEteDg2LTAwMDk6fiMgY2F0IC9ldGMvZGViaWFuX3ZlcnNpb24KPiAxMC4x Cj4gcm9vdEBkZWIxMDEteDg2LTAwMDk6fiMKPgo+Cj4gUmVnYXJkcwo+IFJpbmF0Cj4KCi0tCkxp bnV4LWF1ZGl0IG1haWxpbmcgbGlzdApMaW51eC1hdWRpdEByZWRoYXQuY29tCmh0dHBzOi8vbGlz dG1hbi5yZWRoYXQuY29tL21haWxtYW4vbGlzdGluZm8vbGludXgtYXVkaXQK