Hello there,

yesterday my main hdd, hosting a CentOS 7 system, went full.. I could figure out what happened: /var/log/Xorg.0.log and /var/log/gdm/:0.log files were both enormous (several GB each), flooded with messages like that:

(Xorg’s log excerpts)
Auth name: MIT-MAGIC-COOKIE-1 ID: 441
[ 18.958] AUDIT: Wed Dec 22 16:18:19 2021: 3999: client 1 disconnected
[ 18.960] AUDIT: Wed Dec 22 16:18:19 2021: 3999: client 1 connected from local host ( uid=0 gid=0 pid=4552 )

(gdm’s log excerpts)
Auth name: MIT-MAGIC-COOKIE-1 ID: 441
AUDIT: Wed Dec 22 16:18:19 2021: 3999: client 1 disconnected AUDIT: Wed Dec 22 16:18:19 2021: 3999: client 1 connected from local host ( uid=0 gid=0 pid=4552 )

Meanwhile, I restarted the X session (and removed old big logs), but I
see the logs growing again.

This could happen after a yum-update that day or could be caused by something else.

Does anybody have a clue?

Regards,