reassign 560281 libpam0g thanks The auid is not set by auditd, it is set by the login program.
session required pam_loginuid.so A line like the above in the PAM configuration will cause it to be set. In a quick test it seems that the Debian kernel allows it to be changed once it has been set - which I think shouldn't be possible. Anyway, the fact that it's not set by default seems to be a bug in the default PAM configuration, so I'm reassigning it. There may be a kernel bug in allowing it to be reset but that's a separate issue. -- [email protected] http://etbe.coker.com.au/ My Main Blog http://doc.coker.com.au/ My Documents Blog -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
