From mboxrd@z Thu Jan  1 00:00:00 1970
From: dean@defreitas.net
Subject: ausearch & aureport fail from cron
Date: Wed, 30 May 2012 14:34:14 +0000 (GMT)
Message-ID: <112530930.8418.1338388454285.JavaMail.mail@webmail10>
Reply-To: dean@defreitas.net
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="===============8642447652950709601=="
Return-path: <linux-audit-bounces@redhat.com>
Received: from mx1.redhat.com (ext-mx13.extmail.prod.ext.phx2.redhat.com
	[10.5.110.18])
	by int-mx02.intmail.prod.int.phx2.redhat.com (8.13.8/8.13.8) with ESMTP
	id q4UEYs9D031592
	for <linux-audit@redhat.com>; Wed, 30 May 2012 10:34:54 -0400
Received: from smtprelay.hostedemail.com (smtprelay0236.hostedemail.com
	[216.40.44.236])
	by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id q4UEYK5t025391
	for <linux-audit@redhat.com>; Wed, 30 May 2012 10:34:28 -0400
Received: from filter.hostedemail.com (ff-bigip1 [10.5.19.254])
	by smtprelay06.hostedemail.com (Postfix) with SMTP id 041C2FCDD
	for <linux-audit@redhat.com>; Wed, 30 May 2012 14:34:14 +0000 (UTC)
Received: from webmail10 (imap-ext [216.40.42.5])
	(Authenticated sender: dean@defreitas.net)
	by omf08.hostedemail.com (Postfix) with ESMTP
	for <linux-audit@redhat.com>; Wed, 30 May 2012 14:34:14 +0000 (UTC)
List-Unsubscribe: <https://www.redhat.com/mailman/options/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

--===============8642447652950709601==
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

&nbsp;I am using RHEL 5.8 (upgraded from 5.7) and I can not get these reporting tools to work from cron. I have tried many variations to no avail:<br /><br />/sbin/ausearch -if /var/log/audit/audit.log&nbsp; -ts 05/29/2012 00:00:00 -te 05/29/2012 23:59:59 &gt; somefile.txt<br />/sbin/ausearch --input-logs -ts 05/29/2012 00:00:00 -te 05/29/2012 23:59:59 &gt; somefile.txt<br />cat /var/log/audit/audit.log | /sbin/ausearch -ts 05/29/2012 00:00:00 -te 05/29/2012 23:59:59 &gt; somefile.txt<br /><br />Each of those work from the command line and in a script, but fail when the script is run from cron.<br /><br />Do I need to set up a more extensive environment in my script? I should not need to set LD_LIBRARY_PATH and I have explicitely called ausearch by it's full path.<br /><br />Thank you very
  much in advance,<br />Dean<br />


--===============8642447652950709601==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============8642447652950709601==--