Forums

Resolved
0 votes
I have recently replaced my ClearOs 6 with ClearOs 7.
In the dashboard, I have an Events and Notifications button. If I click it I get a summary of log activity. These events seem to build up very quickly, and most of them [the bit at the bottom says 550 entries (filtered from 275 total entries), oddly] are of the form:

User cyrus logged in via runuser-l
User cyrus logged out via runuser-l

I suspect (from looking at the actual log files) that this is because cyrus keeps running sudo.

Why is this, and, if it is necessary, is there anything I can do to avoid my log cluttering up with these entries?
Friday, January 26 2018, 02:32 PM
Share this post:
Responses (3)
  • Accepted Answer

    Saturday, January 27 2018, 10:53 AM - #Permalink
    Resolved
    0 votes
    cyrus-imapd-2.4.17-8.v7.1.x86_64

    I think the log file is /var/log/audit/audit.log
    The reply is currently minimized Show
  • Accepted Answer

    Friday, January 26 2018, 09:35 PM - #Permalink
    Resolved
    0 votes
    I see the messages now but I'm not sure where they are logged. I have 262,776 out of 131,388 total entries. These are probably logged directly to system-mysql, but I ignore them. I may ask the devs about them if I get the chance.
    The reply is currently minimized Show
  • Accepted Answer

    Friday, January 26 2018, 09:28 PM - #Permalink
    Resolved
    0 votes
    Out of curiosity, which log file is this coming from, and if relevant, can you post a few lines from either side of the messages. Also, what is the output of:
    rpm -q cyrus-imapd
    The reply is currently minimized Show
Your Reply