1

I am trying to debug an issue, and I was wondering if this rings a bell to anyone: My logs get flooded with

audit: type=1107 audit(1479418315.344:1053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='Unknown class service exe="/usr/lib64/systemd/systemd" sauid=0 hostname=? addr=? terminal=?';

This seems to happen whenever an SSH connection is initiated (and we have lots of them, servers talking to each other and maintaining tunnels, etc...)

I did auditctl -D to clear all the audit rules (just for testing which rule generates that), but it has no effect...

My experience with SELinux is limited, so I am not even sure what to look for in the first place...

Thank you!

0

You must log in to answer this question.

Browse other questions tagged .