Skip to content

Instantly share code, notes, and snippets.

@alzabo
Created December 16, 2013 18:32
Show Gist options
  • Save alzabo/7991896 to your computer and use it in GitHub Desktop.
Save alzabo/7991896 to your computer and use it in GitHub Desktop.
audit.log entries related to php.ini.lock
type=SYSCALL msg=audit(1387217398.315:1811677): arch=c000003e syscall=2 success=yes exit=3 a0=182df40 a1=c1 a2=180 a3=7f1647fa916
1 items=2 ppid=17908 pid=22704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295
comm="/usr/local/cpan" exe="/usr/local/cpanel/3rdparty/perl/514/bin/perl" key=(null)
type=CWD msg=audit(1387217398.315:1811677): cwd="/usr/local/cpanel/whostmgr/docroot"
type=PATH msg=audit(1387217398.315:1811677): item=0 name="/usr/local/lib/" inode=160956447 dev=08:03 mode=040755 ouid=0 ogid=0 rd
ev=00:00 nametype=PARENT
type=PATH msg=audit(1387217398.315:1811677): item=1 name="/usr/local/lib/php.ini.lock" inode=160963285 dev=08:03 mode=0100600 oui
d=0 ogid=0 rdev=00:00 nametype=CREATE
type=SYSCALL msg=audit(1387217398.316:1811678): arch=c000003e syscall=87 success=yes exit=0 a0=182dbd0 a1=7f16481eda10 a2=7f16481
eda10 a3=1772c18 items=2 ppid=17908 pid=22704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none)
ses=4294967295 comm="/usr/local/cpan" exe="/usr/local/cpanel/3rdparty/perl/514/bin/perl" key=(null)
type=CWD msg=audit(1387217398.316:1811678): cwd="/usr/local/cpanel/whostmgr/docroot"
type=PATH msg=audit(1387217398.316:1811678): item=0 name="/usr/local/lib/" inode=160956447 dev=08:03 mode=040755 ouid=0 ogid=0 rd
ev=00:00 nametype=PARENT
type=PATH msg=audit(1387217398.316:1811678): item=1 name="/usr/local/lib/php.ini.lock" inode=160963285 dev=08:03 mode=0100600 oui
d=0 ogid=0 rdev=00:00 nametype=DELETE
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment