From: Bill Tangren <bjt@aa.usno.navy.mil>
To: "Kirkwood, David A." <DAVID.A.KIRKWOOD@saic.com>
Cc: linux-audit@redhat.com
Subject: Re: (no subject)
Date: Thu, 15 Mar 2007 17:15:04 -0400 [thread overview]
Message-ID: <45F9B758.6010006@aa.usno.navy.mil> (raw)
In-Reply-To: <954E3479CC27224785179CA04904214D054852F3@0668-its-exmp01.us.saic.com>
Kirkwood, David A. wrote:
> When I view the events related to xscreensaver for a locked screen I
> get 2 separate audit entries, one for a failure and 1 as a success. Both
> have the same uid, euid, etc. Actually, the entries are exactly the same
> except for the event number and the success outcome. I have the
> xscreensaver executable set -rwsr-xr-x.
>
>
>
>
The failure may be due to xscreensaver not being able to write to the faillog,
if you are using pam_tally (to implement three strikes and you are locked out),
but I'm just guessing.
next prev parent reply other threads:[~2007-03-15 21:15 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-03-15 19:42 (no subject) Kirkwood, David A.
2007-03-15 21:15 ` Bill Tangren [this message]
-- strict thread matches above, loose matches on Subject: below --
2008-01-12 13:45 Abhishek Gupta
2008-01-12 14:55 ` Steve Grubb
2007-11-02 16:21 Bill Tangren
2007-08-18 17:02 Henning, Arthur C. (CSL)
2007-05-24 14:03 Kirkwood, David A.
[not found] <000301c78399$1924de30$656fa8c0@centrify.com>
2007-04-20 22:13 ` paul moore
2007-04-20 23:32 ` Steve Grubb
[not found] ` <000701c783ab$6be710e0$656fa8c0@centrify.com>
2007-04-21 0:24 ` paul moore
2007-04-23 13:46 ` Steve Grubb
2006-05-03 17:21 Kirkwood, David A
2006-05-03 17:31 ` Steve Grubb
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=45F9B758.6010006@aa.usno.navy.mil \
--to=bjt@aa.usno.navy.mil \
--cc=DAVID.A.KIRKWOOD@saic.com \
--cc=linux-audit@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox