Hello, On Wednesday, October 16, 2019 3:36:43 PM EDT Ankitha Kundhuru wrote: > I found a new word "per" in some of the records of my audit.log. > Any idea of why this happened
The process personality is not normal. > and what it means ? https://github.com/linux-audit/audit-documentation/blob/master/specs/fields/ field-dictionary.csv#L176 You can use ausearch -i to decode it. -Steve > type=SYSCALL msg=audit(1571245536.351:43593): arch=c000003e syscall=3 > *per=40000* success=yes exit=0 a0=5 a1=5 a2=556213b6d6bc a3=7f483b98bcc0 > items=0 ppid=2653 pid=2655 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 > fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=pts1 ses=3 comm="gdb" > exe="/usr/bin/gdb" key=(null) > > Thank you :) > > Thanks & Regards, > Ankitha Kundhuru -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit
