Re: AUDIT_LOGIN vs AUDIT_USER_LOGIN
It just means Audit Login Context is set...
http://lxr.free-electrons.com/source/kernel/auditsc.c#L1991
I actually see that event when I ssh.
On Fri, Jul 31, 2015 at 9:59 AM, Satish Chandra Kilaru <iam.kilaru(a)gmail.com
wrote:
I see AUDIT_USER_LOGIN when I ssh to a linux machine. What action will
cause AUDIT_LOGIN event?
--
Please Donate to www.wikipedia.org
--
Please Donate to www.wikipedia.org
Attachments:
- attachment.html (text/html — 1.1 KB)