> > > > I installed auditd and added the following rule: > > > > -a always,exit -F arch=b64 -S kill > > > > Now there are more detailed log entries in journalctl. > > Do they help to narrow down who is terminating the processes? I am > > not > > able to interpret them, therefore I am asking. > > Looks like that was a red herring, in the form of GDM terminating its > own GNOME session for the login screen while another VT is active. >
So what would be your suggestion on how to proceed? Are there any promising paths I could follow to narrow down the issues? Or is there anything interesting/critical errors in the log files I have posted which could help? best regards Christian Höffer
