Re: OBJ_PID records
On Friday 28 September 2007 09:31:09 Steve Grubb wrote:
> > type=OBJ_PID msg=audit(09/20/2007 15:29:16.355:12775) :
opid=2287
> > obj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023
>
> Er... And what has pid 2287 on that box?
I am reasonably certain that its gdm given the selinux label.
Scratch that, I forgot to include "server" in my grep. That looks like
Xorg's
process label. So, its the X server.
-Steve