Timestamp & Event Data differ on Audit Logs for sudo
Description
Steps to Reproduce
None
Expected Result
None
Actual Result
None
Environment
None
Hardware Health
None
Error Message (if applicable)
None
Activity
Show:
Bug Clerk August 19, 2024 at 8:09 PM
This issue has now been closed. Comments made after this point may not be viewed by the TrueNAS Teams. Please open a new issue if you have found a problem or need to re-engage with the TrueNAS Engineering Teams.
Bug Clerk August 19, 2024 at 8:02 PM
24.10-RC.1 PR: https://github.com/truenas/middleware/pull/14279
Bug Clerk August 18, 2024 at 8:21 PM
Bug Clerk August 12, 2024 at 9:52 AM
Complete
Pinned fields
Click on the next to a field label to start pinning.
Details
Assignee
Reporter
Peter Goodacre
Peter Goodacre(Deactivated)Affects versions
Story Points
1
Time remaining
0m
Components
Priority
Undefined
Katalon Platform
Linked Test Cases, Katalon Defect Results, Katalon Studio Test Results
Linked Test Cases, Katalon Defect Results, Katalon Studio Test Results
Created August 1, 2024 at 4:17 PM
Updated August 26, 2024 at 2:28 PM
Resolved August 19, 2024 at 8:09 PM
Found testing on ElectricEel-24.10.0-MASTER-20240730-035031
Description: The timestamp and Event Data differ on the Audit Log for Sudo events. The Day, Month, and Year are all correct. However, the hours are differing by 5 hours. This does not occur for Authentication or SMB audit logs, just Sudo thus far.
Steps to reproduce:
Log in to System
Navigate to System → Shell
Type su truenas_admin
Enter password for account
Click Enter
Type sudo tail -f /var/log/syslog
Click Enter
Enter password
Click Enter
Go to System → Audit
Expected Result: The syslog events will display in shell. After going to the Audit screen - and the user has clicked on the specific event - it will show the timestamp and the event data with the same time.
Actual Result: The Time stamp is about 5 hours ahead of the Event Data