CRYPTO_SESSION audit event is truncated in Red Hat Enterprise Linux 7
Issue
- The
laddr=192
was written inCRYPTO_SESSION
message of/var/log/audit/audit.log
type=CRYPTO_SESSION msg=audit(XXXXXXXXXX.XXX:XXXXXXX): <... snip ...> laddr=192 exe="/usr/sbin/sshd" hostname=? addr=X.X.X.X terminal=? res=success'
Environment
Red Hat Enterprise Linux 7.0
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.