AlmaLinux托管服务器夜间挂起问题求助(涉及审计日志)
Hey everyone,
I'm running a hosted AlmaLinux server, and last night it completely hung up—no response at all, couldn't connect via SSH or anything. I had to manually restart it first thing this morning to get it back online. After the restart, I checked the system console and found some audit log entries that looked a bit off (I've transcribed the key parts from the screenshot I took):
audit: type=1101 audit(1701234567.890:123): pid=456 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' audit: type=1100 audit(1701234567.891:124): pid=457 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
I'm not sure if these crond-related audit logs are directly causing the server hang, but they were the only unusual entries around the time the server went down. Has anyone encountered a similar issue with AlmaLinux servers hanging overnight? Any tips on troubleshooting this further or preventing it from happening again would be super helpful!
备注:内容来源于stack exchange,提问作者ali rahmani

