Attachment 1028708 Details for Bug 1221929 – latest AVC's for smbd

latest AVC's for smbd

audit.log (text/plain), 485.70 KB, created by surabhi on 2015-05-22 11:44:53 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: surabhi

Created: 2015-05-22 11:44:53 UTC

Size: 485.70 KB

patch

obsolete

>type=DAEMON_START msg=audit(1432176313.894:8352): auditd start, ver=2.3.7 format=raw kernel=2.6.32-562.el6.x86_64 auid=4294967295 pid=1406 subj=system_u:system_r:auditd_t:s0 res=success
>type=CONFIG_CHANGE msg=audit(1432176314.044:5): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_START msg=audit(1432176392.993:6): user pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="uuidd" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
>type=CRED_ACQ msg=audit(1432176392.993:7): user pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="uuidd" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
>type=CRED_DISP msg=audit(1432176393.028:8): user pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="uuidd" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
>type=USER_END msg=audit(1432176393.028:9): user pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="uuidd" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
>type=USER_ACCT msg=audit(1432176601.997:10): user pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432176602.008:11): user pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432176602.016:12): pid=6054 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_START msg=audit(1432176602.021:13): user pid=6054 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432176602.080:14): user pid=6054 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432176602.080:15): user pid=6054 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432177201.092:16): user pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432177201.092:17): user pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432177201.093:18): pid=6075 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1432177201.100:19): user pid=6075 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432177201.122:20): user pid=6075 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432177201.122:21): user pid=6075 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432177801.130:22): user pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432177801.130:23): user pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432177801.130:24): pid=6096 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1432177801.138:25): user pid=6096 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432177801.152:26): user pid=6096 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432177801.152:27): user pid=6096 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432178401.162:28): user pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432178401.162:29): user pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432178401.162:30): pid=6117 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1432178401.170:31): user pid=6117 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432178401.184:32): user pid=6117 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432178401.184:33): user pid=6117 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432179001.192:34): user pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432179001.192:35): user pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432179001.193:36): pid=6138 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1432179001.198:37): user pid=6138 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432179001.220:38): user pid=6138 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432179001.220:39): user pid=6138 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432179061.228:40): user pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432179061.228:41): user pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432179061.228:42): pid=6144 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1432179061.233:43): user pid=6144 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432179061.460:44): user pid=6144 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432179061.461:45): user pid=6144 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432179601.470:46): user pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432179601.471:47): user pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432179601.472:48): pid=6194 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1432179601.478:49): user pid=6194 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432179601.504:50): user pid=6194 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432179601.504:51): user pid=6194 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432180201.514:52): user pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432180201.515:53): user pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432180201.515:54): pid=6215 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_START msg=audit(1432180201.521:55): user pid=6215 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432180201.535:56): user pid=6215 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432180201.535:57): user pid=6215 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432180801.543:58): user pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432180801.543:59): user pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432180801.543:60): pid=6236 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_START msg=audit(1432180801.551:61): user pid=6236 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432180801.580:62): user pid=6236 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432180801.580:63): user pid=6236 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432181401.588:64): user pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432181401.589:65): user pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432181401.589:66): pid=6257 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
>type=USER_START msg=audit(1432181401.597:67): user pid=6257 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432181401.619:68): user pid=6257 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432181401.619:69): user pid=6257 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432182001.663:70): user pid=29797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432182001.664:71): user pid=29797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432182001.673:72): pid=29797 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
>type=USER_START msg=audit(1432182001.679:73): user pid=29797 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432182001.734:74): user pid=29797 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432182001.734:75): user pid=29797 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432182601.756:76): user pid=29819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432182601.757:77): user pid=29819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432182601.759:78): pid=29819 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12
>type=USER_START msg=audit(1432182601.765:79): user pid=29819 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432182601.786:80): user pid=29819 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432182601.786:81): user pid=29819 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432182661.794:82): user pid=29825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432182661.794:83): user pid=29825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432182661.795:84): pid=29825 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13
>type=USER_START msg=audit(1432182661.801:85): user pid=29825 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432182661.906:86): user pid=29825 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432182661.906:87): user pid=29825 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432183201.915:88): user pid=29873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432183201.915:89): user pid=29873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432183201.916:90): pid=29873 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14
>type=USER_START msg=audit(1432183201.922:91): user pid=29873 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432183201.947:92): user pid=29873 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432183201.947:93): user pid=29873 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432183801.957:94): user pid=29894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432183801.957:95): user pid=29894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432183801.958:96): pid=29894 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15
>type=USER_START msg=audit(1432183801.963:97): user pid=29894 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432183801.984:98): user pid=29894 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432183801.984:99): user pid=29894 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432184401.994:100): user pid=29923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432184401.994:101): user pid=29923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432184401.994:102): pid=29923 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16
>type=USER_START msg=audit(1432184402.000:103): user pid=29923 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432184402.027:104): user pid=29923 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432184402.027:105): user pid=29923 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432185001.036:106): user pid=29944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432185001.036:107): user pid=29944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432185001.036:108): pid=29944 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17
>type=USER_START msg=audit(1432185001.045:109): user pid=29944 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432185001.065:110): user pid=29944 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432185001.065:111): user pid=29944 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432185601.074:112): user pid=29965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432185601.074:113): user pid=29965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432185601.075:114): pid=29965 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18
>type=USER_START msg=audit(1432185601.080:115): user pid=29965 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432185601.100:116): user pid=29965 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432185601.100:117): user pid=29965 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432186201.108:118): user pid=29986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432186201.109:119): user pid=29986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432186201.109:120): pid=29986 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19
>type=USER_START msg=audit(1432186201.115:121): user pid=29986 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432186201.135:122): user pid=29986 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432186201.135:123): user pid=29986 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432186261.142:124): user pid=29992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432186261.142:125): user pid=29992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432186261.142:126): pid=29992 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20
>type=USER_START msg=audit(1432186261.150:127): user pid=29992 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432186261.219:128): user pid=29992 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432186261.219:129): user pid=29992 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432186801.227:130): user pid=30038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432186801.228:131): user pid=30038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432186801.228:132): pid=30038 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21
>type=USER_START msg=audit(1432186801.235:133): user pid=30038 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432186801.248:134): user pid=30038 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432186801.248:135): user pid=30038 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432187401.257:136): user pid=30059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432187401.257:137): user pid=30059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432187401.259:138): pid=30059 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22
>type=USER_START msg=audit(1432187401.264:139): user pid=30059 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432187401.285:140): user pid=30059 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432187401.285:141): user pid=30059 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432188001.296:142): user pid=30080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432188001.296:143): user pid=30080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432188001.297:144): pid=30080 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23
>type=USER_START msg=audit(1432188001.305:145): user pid=30080 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432188001.326:146): user pid=30080 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432188001.326:147): user pid=30080 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432188601.335:148): user pid=30102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432188601.335:149): user pid=30102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432188601.336:150): pid=30102 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24
>type=USER_START msg=audit(1432188601.342:151): user pid=30102 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432188601.363:152): user pid=30102 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432188601.363:153): user pid=30102 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432189201.371:154): user pid=30123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432189201.372:155): user pid=30123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432189201.372:156): pid=30123 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25
>type=USER_START msg=audit(1432189201.378:157): user pid=30123 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432189201.399:158): user pid=30123 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432189201.399:159): user pid=30123 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432189801.409:160): user pid=30144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432189801.409:161): user pid=30144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432189801.409:162): pid=30144 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26
>type=USER_START msg=audit(1432189801.417:163): user pid=30144 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432189801.438:164): user pid=30144 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432189801.438:165): user pid=30144 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432189861.444:166): user pid=30150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432189861.444:167): user pid=30150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432189861.444:168): pid=30150 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27
>type=USER_START msg=audit(1432189861.452:169): user pid=30150 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432189861.510:170): user pid=30150 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432189861.510:171): user pid=30150 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432190401.517:172): user pid=30196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432190401.518:173): user pid=30196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432190401.518:174): pid=30196 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28
>type=USER_START msg=audit(1432190401.525:175): user pid=30196 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432190401.547:176): user pid=30196 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432190401.547:177): user pid=30196 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432191001.559:178): user pid=30218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432191001.559:179): user pid=30218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432191001.560:180): pid=30218 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29
>type=USER_START msg=audit(1432191001.568:181): user pid=30218 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432191001.594:182): user pid=30218 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432191001.594:183): user pid=30218 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191208.818:184): user pid=30229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=30229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191208.818:185): user pid=30229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=30229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432191208.822:186): user pid=30228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=30229 suid=74 rport=35932 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432191208.822:187): user pid=30228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=30229 suid=74 rport=35932 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191208.853:188): user pid=30228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30229 suid=74 rport=35932 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191208.854:189): user pid=30228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=30228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191208.854:190): user pid=30228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=30228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=USER_LOGIN msg=audit(1432191208.854:191): user pid=30228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=ssh res=failed'
>type=CRYPTO_KEY_USER msg=audit(1432191241.202:192): user pid=30232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=30232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191241.202:193): user pid=30232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=30232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432191241.203:194): user pid=30231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=30232 suid=74 rport=35934 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432191241.203:195): user pid=30231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=30232 suid=74 rport=35934 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191473.067:196): user pid=30240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=30240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191473.067:197): user pid=30240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=30240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432191473.068:198): user pid=30239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=30240 suid=74 rport=35950 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432191473.068:199): user pid=30239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=30240 suid=74 rport=35950 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191485.432:200): user pid=30239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30240 suid=74 rport=35950 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=USER_ERR msg=audit(1432191485.478:201): user pid=30239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident acct="?" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=failed'
>type=CRYPTO_KEY_USER msg=audit(1432191485.479:202): user pid=30239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=30239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191485.479:203): user pid=30239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=30239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=USER_LOGIN msg=audit(1432191485.479:204): user pid=30239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=ssh res=failed'
>type=CRYPTO_KEY_USER msg=audit(1432191487.094:205): user pid=30242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=30242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191487.094:206): user pid=30242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=30242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432191487.094:207): user pid=30241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=30242 suid=74 rport=35952 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432191487.095:208): user pid=30241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=30242 suid=74 rport=35952 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=USER_AUTH msg=audit(1432191512.431:209): user pid=30241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1432191512.434:210): user pid=30241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191512.435:211): user pid=30241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30242 suid=74 rport=35952 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=USER_AUTH msg=audit(1432191512.436:212): user pid=30241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1432191512.438:213): user pid=30241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=LOGIN msg=audit(1432191512.438:214): pid=30241 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30
>type=USER_ROLE_CHANGE msg=audit(1432191512.716:215): user pid=30241 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=USER_START msg=audit(1432191512.724:216): user pid=30241 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1432191512.741:217): user pid=30246 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=/dev/pts/0 res=success'
>type=USER_START msg=audit(1432191512.742:218): user pid=30246 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=/dev/pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191512.743:219): user pid=30246 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=30246 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1432191512.743:220): user pid=30246 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=30246 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=pts/0 res=success'
>type=CRED_REFR msg=audit(1432191512.744:221): user pid=30246 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1432191601.640:222): user pid=30268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432191601.640:223): user pid=30268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432191601.651:224): pid=30268 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31
>type=USER_START msg=audit(1432191601.660:225): user pid=30268 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432191601.713:226): user pid=30268 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432191601.713:227): user pid=30268 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432192201.729:228): user pid=30296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432192201.730:229): user pid=30296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432192201.730:230): pid=30296 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=32
>type=USER_START msg=audit(1432192201.736:231): user pid=30296 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432192201.761:232): user pid=30296 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432192201.762:233): user pid=30296 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432192801.773:234): user pid=30317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432192801.773:235): user pid=30317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432192801.774:236): pid=30317 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=33
>type=USER_START msg=audit(1432192801.780:237): user pid=30317 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432192801.802:238): user pid=30317 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432192801.802:239): user pid=30317 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432193401.811:240): user pid=30338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432193401.811:241): user pid=30338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432193401.812:242): pid=30338 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=34
>type=USER_START msg=audit(1432193401.819:243): user pid=30338 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432193401.840:244): user pid=30338 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432193401.840:245): user pid=30338 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432193461.846:246): user pid=30344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432193461.846:247): user pid=30344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432193461.847:248): pid=30344 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=35
>type=USER_START msg=audit(1432193461.853:249): user pid=30344 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432193461.973:250): user pid=30344 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432193461.973:251): user pid=30344 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432194001.981:252): user pid=30390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432194001.981:253): user pid=30390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432194001.984:254): pid=30390 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=36
>type=USER_START msg=audit(1432194001.991:255): user pid=30390 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432194002.020:256): user pid=30390 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432194002.020:257): user pid=30390 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432194601.039:258): user pid=30412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432194601.039:259): user pid=30412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432194601.039:260): pid=30412 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=37
>type=USER_START msg=audit(1432194601.045:261): user pid=30412 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432194601.080:262): user pid=30412 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432194601.080:263): user pid=30412 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432195201.089:264): user pid=30433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432195201.090:265): user pid=30433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432195201.090:266): pid=30433 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=38
>type=USER_START msg=audit(1432195201.096:267): user pid=30433 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432195201.125:268): user pid=30433 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432195201.126:269): user pid=30433 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432195801.134:270): user pid=30454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432195801.134:271): user pid=30454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432195801.135:272): pid=30454 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=39
>type=USER_START msg=audit(1432195801.144:273): user pid=30454 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432195801.173:274): user pid=30454 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432195801.173:275): user pid=30454 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432196401.181:276): user pid=30475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432196401.181:277): user pid=30475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432196401.181:278): pid=30475 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=40
>type=USER_START msg=audit(1432196401.189:279): user pid=30475 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432196401.212:280): user pid=30475 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432196401.212:281): user pid=30475 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432197001.220:282): user pid=30496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432197001.221:283): user pid=30496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432197001.221:284): pid=30496 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=41
>type=USER_START msg=audit(1432197001.227:285): user pid=30496 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432197001.248:286): user pid=30496 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432197001.248:287): user pid=30496 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432197061.255:288): user pid=30502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432197061.255:289): user pid=30502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432197061.255:290): pid=30502 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=42
>type=USER_START msg=audit(1432197061.263:291): user pid=30502 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432197061.333:292): user pid=30502 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432197061.333:293): user pid=30502 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432197601.341:294): user pid=30548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432197601.341:295): user pid=30548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432197601.341:296): pid=30548 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=43
>type=USER_START msg=audit(1432197601.349:297): user pid=30548 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432197601.370:298): user pid=30548 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432197601.370:299): user pid=30548 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432198201.381:300): user pid=30570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432198201.381:301): user pid=30570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432198201.384:302): pid=30570 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=44
>type=USER_START msg=audit(1432198201.391:303): user pid=30570 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432198201.420:304): user pid=30570 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432198201.421:305): user pid=30570 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432198801.429:306): user pid=30591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432198801.429:307): user pid=30591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432198801.430:308): pid=30591 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=45
>type=USER_START msg=audit(1432198801.438:309): user pid=30591 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432198801.459:310): user pid=30591 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432198801.459:311): user pid=30591 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432199401.469:312): user pid=30612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432199401.470:313): user pid=30612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432199401.470:314): pid=30612 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=46
>type=USER_START msg=audit(1432199401.476:315): user pid=30612 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432199401.498:316): user pid=30612 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432199401.498:317): user pid=30612 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432199535.047:318): user pid=30241 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1432199535.047:319): user pid=30241 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=USER_END msg=audit(1432199535.049:320): user pid=30241 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_LOGOUT msg=audit(1432199535.050:321): user pid=30241 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1432199535.050:322): user pid=30241 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=30241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432199535.051:323): user pid=30241 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=30241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432199535.051:324): user pid=30241 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30241 suid=0 rport=35952 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=USER_ACCT msg=audit(1432200001.511:325): user pid=30633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432200001.511:326): user pid=30633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432200001.512:327): pid=30633 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=47
>type=USER_START msg=audit(1432200001.518:328): user pid=30633 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432200001.543:329): user pid=30633 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432200001.544:330): user pid=30633 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432200601.552:331): user pid=30655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432200601.552:332): user pid=30655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432200601.552:333): pid=30655 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=48
>type=USER_START msg=audit(1432200601.559:334): user pid=30655 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432200601.583:335): user pid=30655 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432200601.583:336): user pid=30655 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432200661.588:337): user pid=30661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432200661.589:338): user pid=30661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432200661.589:339): pid=30661 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=49
>type=USER_START msg=audit(1432200661.595:340): user pid=30661 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432200661.671:341): user pid=30661 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432200661.671:342): user pid=30661 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432201201.680:343): user pid=30707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432201201.680:344): user pid=30707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432201201.681:345): pid=30707 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=50
>type=USER_START msg=audit(1432201201.689:346): user pid=30707 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432201201.710:347): user pid=30707 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432201201.710:348): user pid=30707 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432201801.719:349): user pid=30728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432201801.719:350): user pid=30728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432201801.720:351): pid=30728 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=51
>type=USER_START msg=audit(1432201801.728:352): user pid=30728 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432201801.750:353): user pid=30728 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432201801.750:354): user pid=30728 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432202401.759:355): user pid=30749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432202401.760:356): user pid=30749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432202401.760:357): pid=30749 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=52
>type=USER_START msg=audit(1432202401.766:358): user pid=30749 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432202401.787:359): user pid=30749 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432202401.787:360): user pid=30749 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432203001.796:361): user pid=30770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432203001.796:362): user pid=30770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432203001.797:363): pid=30770 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=53
>type=USER_START msg=audit(1432203001.810:364): user pid=30770 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432203001.840:365): user pid=30770 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432203001.840:366): user pid=30770 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432203601.848:367): user pid=30791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432203601.848:368): user pid=30791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432203601.848:369): pid=30791 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=54
>type=USER_START msg=audit(1432203601.854:370): user pid=30791 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432203601.876:371): user pid=30791 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432203601.876:372): user pid=30791 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432204201.888:373): user pid=30812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432204201.888:374): user pid=30812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432204201.889:375): pid=30812 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=55
>type=USER_START msg=audit(1432204201.895:376): user pid=30812 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432204201.922:377): user pid=30812 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432204201.922:378): user pid=30812 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432204261.930:379): user pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432204261.930:380): user pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432204261.930:381): pid=30818 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=56
>type=USER_START msg=audit(1432204261.938:382): user pid=30818 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432204261.995:383): user pid=30818 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432204261.995:384): user pid=30818 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432204802.003:385): user pid=30864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432204802.003:386): user pid=30864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432204802.004:387): pid=30864 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=57
>type=USER_START msg=audit(1432204802.012:388): user pid=30864 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432204802.050:389): user pid=30864 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432204802.050:390): user pid=30864 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432205401.058:391): user pid=30886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432205401.059:392): user pid=30886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432205401.060:393): pid=30886 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=58
>type=USER_START msg=audit(1432205401.066:394): user pid=30886 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432205401.092:395): user pid=30886 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432205401.092:396): user pid=30886 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432206001.102:397): user pid=30907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432206001.102:398): user pid=30907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432206001.103:399): pid=30907 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=59
>type=USER_START msg=audit(1432206001.106:400): user pid=30907 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432206001.127:401): user pid=30907 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432206001.127:402): user pid=30907 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432206601.134:403): user pid=30929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432206601.135:404): user pid=30929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432206601.135:405): pid=30929 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=60
>type=USER_START msg=audit(1432206601.142:406): user pid=30929 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432206601.163:407): user pid=30929 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432206601.163:408): user pid=30929 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432207201.173:409): user pid=30950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432207201.173:410): user pid=30950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432207201.174:411): pid=30950 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=61
>type=USER_START msg=audit(1432207201.181:412): user pid=30950 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432207201.202:413): user pid=30950 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432207201.202:414): user pid=30950 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432207801.209:415): user pid=30971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432207801.210:416): user pid=30971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432207801.210:417): pid=30971 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=62
>type=USER_START msg=audit(1432207801.217:418): user pid=30971 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432207801.248:419): user pid=30971 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432207801.248:420): user pid=30971 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432207861.254:421): user pid=30977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432207861.254:422): user pid=30977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432207861.255:423): pid=30977 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=63
>type=USER_START msg=audit(1432207861.268:424): user pid=30977 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432207861.334:425): user pid=30977 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432207861.335:426): user pid=30977 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432208401.343:427): user pid=31023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432208401.344:428): user pid=31023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432208401.344:429): pid=31023 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=64
>type=USER_START msg=audit(1432208401.351:430): user pid=31023 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432208401.382:431): user pid=31023 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432208401.382:432): user pid=31023 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432209001.392:433): user pid=31044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432209001.392:434): user pid=31044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432209001.392:435): pid=31044 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=65
>type=USER_START msg=audit(1432209001.400:436): user pid=31044 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432209001.414:437): user pid=31044 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432209001.414:438): user pid=31044 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432209601.423:439): user pid=31065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432209601.423:440): user pid=31065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432209601.424:441): pid=31065 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=66
>type=USER_START msg=audit(1432209601.431:442): user pid=31065 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432209601.452:443): user pid=31065 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432209601.452:444): user pid=31065 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432210201.461:445): user pid=31086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432210201.461:446): user pid=31086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432210201.462:447): pid=31086 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=67
>type=USER_START msg=audit(1432210201.468:448): user pid=31086 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432210201.481:449): user pid=31086 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432210201.481:450): user pid=31086 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432210801.490:451): user pid=31107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432210801.491:452): user pid=31107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432210801.491:453): pid=31107 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=68
>type=USER_START msg=audit(1432210801.495:454): user pid=31107 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432210801.518:455): user pid=31107 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432210801.518:456): user pid=31107 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432211401.527:457): user pid=31128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432211401.527:458): user pid=31128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432211401.527:459): pid=31128 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=69
>type=USER_START msg=audit(1432211401.534:460): user pid=31128 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432211401.554:461): user pid=31128 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432211401.554:462): user pid=31128 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432211461.560:463): user pid=31134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432211461.561:464): user pid=31134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432211461.562:465): pid=31134 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=70
>type=USER_START msg=audit(1432211461.567:466): user pid=31134 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432211461.625:467): user pid=31134 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432211461.625:468): user pid=31134 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432212001.633:469): user pid=31180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432212001.633:470): user pid=31180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432212001.634:471): pid=31180 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=71
>type=USER_START msg=audit(1432212001.639:472): user pid=31180 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432212001.652:473): user pid=31180 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432212001.652:474): user pid=31180 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432212601.663:475): user pid=31202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432212601.663:476): user pid=31202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432212601.663:477): pid=31202 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=72
>type=USER_START msg=audit(1432212601.669:478): user pid=31202 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432212601.689:479): user pid=31202 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432212601.689:480): user pid=31202 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432213201.699:481): user pid=31223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432213201.699:482): user pid=31223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432213201.699:483): pid=31223 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=73
>type=USER_START msg=audit(1432213201.706:484): user pid=31223 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432213201.728:485): user pid=31223 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432213201.728:486): user pid=31223 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432213801.736:487): user pid=31244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432213801.736:488): user pid=31244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432213801.737:489): pid=31244 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=74
>type=USER_START msg=audit(1432213801.744:490): user pid=31244 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432213801.764:491): user pid=31244 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432213801.765:492): user pid=31244 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432214401.774:493): user pid=31265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432214401.774:494): user pid=31265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432214401.775:495): pid=31265 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=75
>type=USER_START msg=audit(1432214401.780:496): user pid=31265 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432214401.810:497): user pid=31265 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432214401.810:498): user pid=31265 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432215001.820:499): user pid=31286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432215001.820:500): user pid=31286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432215001.820:501): pid=31286 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=76
>type=USER_START msg=audit(1432215001.826:502): user pid=31286 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432215001.845:503): user pid=31286 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432215001.847:504): user pid=31286 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432215061.854:505): user pid=31292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432215061.854:506): user pid=31292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432215061.854:507): pid=31292 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=77
>type=USER_START msg=audit(1432215061.860:508): user pid=31292 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432215061.917:509): user pid=31292 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432215061.917:510): user pid=31292 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432215601.931:511): user pid=31359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432215601.931:512): user pid=31359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432215601.932:513): pid=31359 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=78
>type=USER_START msg=audit(1432215601.937:514): user pid=31359 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432215601.965:515): user pid=31359 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432215601.965:516): user pid=31359 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432216201.974:517): user pid=31380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432216201.974:518): user pid=31380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432216201.975:519): pid=31380 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=79
>type=USER_START msg=audit(1432216201.980:520): user pid=31380 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432216202.001:521): user pid=31380 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432216202.001:522): user pid=31380 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432216801.009:523): user pid=31401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432216801.010:524): user pid=31401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432216801.011:525): pid=31401 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=80
>type=USER_START msg=audit(1432216801.017:526): user pid=31401 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432216801.038:527): user pid=31401 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432216801.038:528): user pid=31401 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432217401.048:529): user pid=31422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432217401.048:530): user pid=31422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432217401.049:531): pid=31422 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=81
>type=USER_START msg=audit(1432217401.056:532): user pid=31422 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432217401.077:533): user pid=31422 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432217401.077:534): user pid=31422 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432218001.086:535): user pid=31443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432218001.087:536): user pid=31443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432218001.087:537): pid=31443 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=82
>type=USER_START msg=audit(1432218001.094:538): user pid=31443 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432218001.115:539): user pid=31443 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432218001.115:540): user pid=31443 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432218601.125:541): user pid=31465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432218601.125:542): user pid=31465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432218601.126:543): pid=31465 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=83
>type=USER_START msg=audit(1432218601.133:544): user pid=31465 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432218601.154:545): user pid=31465 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432218601.154:546): user pid=31465 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432218661.158:547): user pid=31471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432218661.159:548): user pid=31471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432218661.160:549): pid=31471 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=84
>type=USER_START msg=audit(1432218661.167:550): user pid=31471 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432218661.243:551): user pid=31471 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432218661.243:552): user pid=31471 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432219201.252:553): user pid=31517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432219201.252:554): user pid=31517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432219201.260:555): pid=31517 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=85
>type=USER_START msg=audit(1432219201.265:556): user pid=31517 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432219201.280:557): user pid=31517 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432219201.281:558): user pid=31517 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432219801.290:559): user pid=31540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432219801.290:560): user pid=31540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432219801.291:561): pid=31540 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=86
>type=USER_START msg=audit(1432219801.299:562): user pid=31540 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432219801.331:563): user pid=31540 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432219801.331:564): user pid=31540 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432220401.341:565): user pid=31561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432220401.341:566): user pid=31561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432220401.342:567): pid=31561 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=87
>type=USER_START msg=audit(1432220401.347:568): user pid=31561 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432220401.377:569): user pid=31561 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432220401.377:570): user pid=31561 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432221001.385:571): user pid=31582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432221001.385:572): user pid=31582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432221001.386:573): pid=31582 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=88
>type=USER_START msg=audit(1432221001.394:574): user pid=31582 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432221001.423:575): user pid=31582 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432221001.423:576): user pid=31582 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432221601.431:577): user pid=31603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432221601.431:578): user pid=31603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432221601.432:579): pid=31603 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=89
>type=USER_START msg=audit(1432221601.439:580): user pid=31603 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432221601.460:581): user pid=31603 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432221601.460:582): user pid=31603 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432222201.473:583): user pid=31624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432222201.473:584): user pid=31624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432222201.474:585): pid=31624 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=90
>type=USER_START msg=audit(1432222201.482:586): user pid=31624 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432222201.502:587): user pid=31624 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432222201.505:588): user pid=31624 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432222261.513:589): user pid=31630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432222261.513:590): user pid=31630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432222261.514:591): pid=31630 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=91
>type=USER_START msg=audit(1432222261.522:592): user pid=31630 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432222261.592:593): user pid=31630 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432222261.592:594): user pid=31630 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432222801.607:595): user pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432222801.607:596): user pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432222801.608:597): pid=31676 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=92
>type=USER_START msg=audit(1432222801.613:598): user pid=31676 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432222801.630:599): user pid=31676 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432222801.635:600): user pid=31676 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432223401.642:601): user pid=31697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432223401.643:602): user pid=31697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432223401.643:603): pid=31697 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=93
>type=USER_START msg=audit(1432223401.650:604): user pid=31697 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432223401.673:605): user pid=31697 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432223401.673:606): user pid=31697 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432224001.681:607): user pid=31718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432224001.682:608): user pid=31718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432224001.682:609): pid=31718 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=94
>type=USER_START msg=audit(1432224001.687:610): user pid=31718 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432224001.718:611): user pid=31718 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432224001.718:612): user pid=31718 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432224601.729:613): user pid=31740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432224601.729:614): user pid=31740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432224601.729:615): pid=31740 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=95
>type=USER_START msg=audit(1432224601.738:616): user pid=31740 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432224601.758:617): user pid=31740 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432224601.760:618): user pid=31740 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432225201.770:619): user pid=31761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432225201.770:620): user pid=31761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432225201.770:621): pid=31761 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=96
>type=USER_START msg=audit(1432225201.776:622): user pid=31761 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432225201.805:623): user pid=31761 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432225201.805:624): user pid=31761 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432225801.813:625): user pid=31782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432225801.814:626): user pid=31782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432225801.814:627): pid=31782 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=97
>type=USER_START msg=audit(1432225801.820:628): user pid=31782 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432225801.843:629): user pid=31782 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432225801.843:630): user pid=31782 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432225861.849:631): user pid=31788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432225861.850:632): user pid=31788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432225861.850:633): pid=31788 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=98
>type=USER_START msg=audit(1432225861.855:634): user pid=31788 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432225861.914:635): user pid=31788 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432225861.914:636): user pid=31788 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432226401.924:637): user pid=31834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432226401.924:638): user pid=31834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432226401.925:639): pid=31834 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=99
>type=USER_START msg=audit(1432226401.933:640): user pid=31834 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432226401.946:641): user pid=31834 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432226401.946:642): user pid=31834 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432227001.953:643): user pid=31855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432227001.954:644): user pid=31855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432227001.955:645): pid=31855 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=100
>type=USER_START msg=audit(1432227001.961:646): user pid=31855 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432227001.985:647): user pid=31855 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432227001.985:648): user pid=31855 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432227601.994:649): user pid=31876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432227601.995:650): user pid=31876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432227601.995:651): pid=31876 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=101
>type=USER_START msg=audit(1432227602.002:652): user pid=31876 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432227602.027:653): user pid=31876 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432227602.027:654): user pid=31876 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432228201.035:655): user pid=31897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432228201.035:656): user pid=31897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432228201.036:657): pid=31897 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=102
>type=USER_START msg=audit(1432228201.042:658): user pid=31897 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432228201.062:659): user pid=31897 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432228201.062:660): user pid=31897 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432228801.070:661): user pid=31918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432228801.071:662): user pid=31918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432228801.071:663): pid=31918 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=103
>type=USER_START msg=audit(1432228801.085:664): user pid=31918 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432228801.107:665): user pid=31918 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432228801.107:666): user pid=31918 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432229401.116:667): user pid=31939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432229401.116:668): user pid=31939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432229401.117:669): pid=31939 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=104
>type=USER_START msg=audit(1432229401.122:670): user pid=31939 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432229401.142:671): user pid=31939 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432229401.142:672): user pid=31939 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432229461.149:673): user pid=31945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432229461.149:674): user pid=31945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432229461.150:675): pid=31945 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=105
>type=USER_START msg=audit(1432229461.157:676): user pid=31945 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432229461.214:677): user pid=31945 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432229461.214:678): user pid=31945 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432230001.222:679): user pid=31991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432230001.223:680): user pid=31991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432230001.224:681): pid=31991 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=106
>type=USER_START msg=audit(1432230001.229:682): user pid=31991 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432230001.254:683): user pid=31991 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432230001.254:684): user pid=31991 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432230601.262:685): user pid=32013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432230601.262:686): user pid=32013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432230601.263:687): pid=32013 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=107
>type=USER_START msg=audit(1432230601.268:688): user pid=32013 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432230601.298:689): user pid=32013 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432230601.298:690): user pid=32013 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432231201.307:691): user pid=32034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432231201.308:692): user pid=32034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432231201.308:693): pid=32034 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=108
>type=USER_START msg=audit(1432231201.315:694): user pid=32034 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432231201.337:695): user pid=32034 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432231201.337:696): user pid=32034 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432231801.346:697): user pid=32055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432231801.347:698): user pid=32055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432231801.347:699): pid=32055 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=109
>type=USER_START msg=audit(1432231801.354:700): user pid=32055 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432231801.383:701): user pid=32055 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432231801.383:702): user pid=32055 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432232401.391:703): user pid=32076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432232401.391:704): user pid=32076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432232401.392:705): pid=32076 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=110
>type=USER_START msg=audit(1432232401.399:706): user pid=32076 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432232401.420:707): user pid=32076 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432232401.421:708): user pid=32076 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432232581.426:709): user pid=32085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432232581.426:710): user pid=32085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432232581.427:711): pid=32085 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=111
>type=USER_START msg=audit(1432232581.434:712): user pid=32085 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432232581.493:713): user pid=32085 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432232581.493:714): user pid=32085 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432233001.504:715): user pid=32106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432233001.504:716): user pid=32106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432233001.505:717): pid=32106 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=112
>type=USER_START msg=audit(1432233001.512:718): user pid=32106 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432233001.533:719): user pid=32106 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432233001.533:720): user pid=32106 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432233061.538:721): user pid=32112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432233061.538:722): user pid=32112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432233061.538:723): pid=32112 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=113
>type=USER_START msg=audit(1432233061.545:724): user pid=32112 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432233061.637:725): user pid=32112 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432233061.638:726): user pid=32112 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432233601.646:727): user pid=32162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432233601.647:728): user pid=32162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432233601.647:729): pid=32162 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=114
>type=USER_START msg=audit(1432233601.656:730): user pid=32162 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432233601.681:731): user pid=32162 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432233601.682:732): user pid=32162 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432234201.691:733): user pid=32184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432234201.692:734): user pid=32184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432234201.692:735): pid=32184 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=115
>type=USER_START msg=audit(1432234201.698:736): user pid=32184 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432234201.728:737): user pid=32184 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432234201.728:738): user pid=32184 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432234801.736:739): user pid=32205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432234801.736:740): user pid=32205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432234801.737:741): pid=32205 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=116
>type=USER_START msg=audit(1432234801.745:742): user pid=32205 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432234801.765:743): user pid=32205 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432234801.765:744): user pid=32205 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432235401.775:745): user pid=32226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432235401.776:746): user pid=32226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432235401.776:747): pid=32226 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=117
>type=USER_START msg=audit(1432235401.782:748): user pid=32226 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432235401.803:749): user pid=32226 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432235401.803:750): user pid=32226 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432236001.812:751): user pid=32247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432236001.812:752): user pid=32247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432236001.813:753): pid=32247 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=118
>type=USER_START msg=audit(1432236001.819:754): user pid=32247 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432236001.840:755): user pid=32247 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432236001.840:756): user pid=32247 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432236601.847:757): user pid=32269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432236601.848:758): user pid=32269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432236601.848:759): pid=32269 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=119
>type=USER_START msg=audit(1432236601.855:760): user pid=32269 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432236601.878:761): user pid=32269 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432236601.879:762): user pid=32269 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432236661.885:763): user pid=32275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432236661.885:764): user pid=32275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432236661.886:765): pid=32275 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=120
>type=USER_START msg=audit(1432236661.893:766): user pid=32275 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432236661.970:767): user pid=32275 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432236661.970:768): user pid=32275 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432237201.982:769): user pid=32325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432237201.982:770): user pid=32325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432237201.983:771): pid=32325 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=121
>type=USER_START msg=audit(1432237201.992:772): user pid=32325 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432237202.028:773): user pid=32325 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432237202.028:774): user pid=32325 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432237801.036:775): user pid=32346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432237801.037:776): user pid=32346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432237801.037:777): pid=32346 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=122
>type=USER_START msg=audit(1432237801.042:778): user pid=32346 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432237801.063:779): user pid=32346 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432237801.063:780): user pid=32346 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432238401.072:781): user pid=32367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432238401.073:782): user pid=32367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432238401.073:783): pid=32367 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=123
>type=USER_START msg=audit(1432238401.082:784): user pid=32367 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432238401.103:785): user pid=32367 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432238401.103:786): user pid=32367 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432239001.112:787): user pid=32388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432239001.112:788): user pid=32388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432239001.113:789): pid=32388 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=124
>type=USER_START msg=audit(1432239001.120:790): user pid=32388 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432239001.142:791): user pid=32388 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432239001.142:792): user pid=32388 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432239601.149:793): user pid=32409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432239601.150:794): user pid=32409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432239601.150:795): pid=32409 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=125
>type=USER_START msg=audit(1432239601.157:796): user pid=32409 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432239601.187:797): user pid=32409 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432239601.187:798): user pid=32409 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432240201.197:799): user pid=32430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432240201.198:800): user pid=32430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432240201.198:801): pid=32430 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=126
>type=USER_START msg=audit(1432240201.205:802): user pid=32430 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432240201.225:803): user pid=32430 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432240201.226:804): user pid=32430 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432240261.231:805): user pid=32436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432240261.231:806): user pid=32436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432240261.232:807): pid=32436 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=127
>type=USER_START msg=audit(1432240261.240:808): user pid=32436 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432240261.307:809): user pid=32436 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432240261.307:810): user pid=32436 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432240801.316:811): user pid=32486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432240801.317:812): user pid=32486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432240801.317:813): pid=32486 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=128
>type=USER_START msg=audit(1432240801.324:814): user pid=32486 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432240801.345:815): user pid=32486 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432240801.345:816): user pid=32486 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432241401.354:817): user pid=32508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432241401.354:818): user pid=32508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432241401.354:819): pid=32508 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=129
>type=USER_START msg=audit(1432241401.362:820): user pid=32508 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432241401.383:821): user pid=32508 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432241401.383:822): user pid=32508 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432242001.391:823): user pid=32529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432242001.391:824): user pid=32529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432242001.391:825): pid=32529 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=130
>type=USER_START msg=audit(1432242001.397:826): user pid=32529 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432242001.426:827): user pid=32529 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432242001.426:828): user pid=32529 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432242601.434:829): user pid=32551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432242601.435:830): user pid=32551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432242601.435:831): pid=32551 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=131
>type=USER_START msg=audit(1432242601.442:832): user pid=32551 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432242601.464:833): user pid=32551 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432242601.464:834): user pid=32551 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432243201.473:835): user pid=32572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432243201.473:836): user pid=32572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432243201.473:837): pid=32572 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=132
>type=USER_START msg=audit(1432243201.481:838): user pid=32572 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432243201.510:839): user pid=32572 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432243201.510:840): user pid=32572 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432243801.521:841): user pid=32593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432243801.521:842): user pid=32593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432243801.522:843): pid=32593 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=133
>type=USER_START msg=audit(1432243801.527:844): user pid=32593 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432243801.555:845): user pid=32593 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432243801.556:846): user pid=32593 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432243861.561:847): user pid=32599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432243861.562:848): user pid=32599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432243861.562:849): pid=32599 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=134
>type=USER_START msg=audit(1432243861.572:850): user pid=32599 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432243861.638:851): user pid=32599 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432243861.638:852): user pid=32599 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432244401.647:853): user pid=32649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432244401.647:854): user pid=32649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432244401.648:855): pid=32649 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=135
>type=USER_START msg=audit(1432244401.653:856): user pid=32649 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432244401.674:857): user pid=32649 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432244401.674:858): user pid=32649 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432245001.683:859): user pid=32670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432245001.683:860): user pid=32670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432245001.683:861): pid=32670 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=136
>type=USER_START msg=audit(1432245001.692:862): user pid=32670 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432245001.720:863): user pid=32670 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432245001.720:864): user pid=32670 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432245601.730:865): user pid=32691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432245601.730:866): user pid=32691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432245601.730:867): pid=32691 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=137
>type=USER_START msg=audit(1432245601.737:868): user pid=32691 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432245601.758:869): user pid=32691 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432245601.758:870): user pid=32691 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432246201.794:871): user pid=502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432246201.794:872): user pid=502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432246201.798:873): pid=502 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=138
>type=USER_START msg=audit(1432246201.803:874): user pid=502 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432246201.845:875): user pid=502 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432246201.845:876): user pid=502 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432246801.855:877): user pid=523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432246801.855:878): user pid=523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432246801.855:879): pid=523 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=139
>type=USER_START msg=audit(1432246801.861:880): user pid=523 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432246801.882:881): user pid=523 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432246801.882:882): user pid=523 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432247401.890:883): user pid=544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432247401.890:884): user pid=544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432247401.891:885): pid=544 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=140
>type=USER_START msg=audit(1432247401.898:886): user pid=544 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432247401.912:887): user pid=544 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432247401.912:888): user pid=544 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432247461.917:889): user pid=550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432247461.917:890): user pid=550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432247461.917:891): pid=550 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=141
>type=USER_START msg=audit(1432247461.924:892): user pid=550 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432247462.015:893): user pid=550 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432247462.015:894): user pid=550 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432248001.025:895): user pid=597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432248001.026:896): user pid=597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432248001.026:897): pid=597 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=142
>type=USER_START msg=audit(1432248001.033:898): user pid=597 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432248001.055:899): user pid=597 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432248001.056:900): user pid=597 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432248601.075:901): user pid=641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432248601.075:902): user pid=641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432248601.083:903): pid=641 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=143
>type=USER_START msg=audit(1432248601.088:904): user pid=641 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432248601.106:905): user pid=641 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432248601.106:906): user pid=641 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432249201.113:907): user pid=662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432249201.115:908): user pid=662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432249201.115:909): pid=662 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=144
>type=USER_START msg=audit(1432249201.121:910): user pid=662 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432249201.144:911): user pid=662 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432249201.144:912): user pid=662 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRYPTO_KEY_USER msg=audit(1432249701.216:913): user pid=681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.10.50.2 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432249701.216:914): user pid=681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.10.50.2 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432249701.850:915): user pid=680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=681 suid=74 rport=41044 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.10.50.2 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432249701.851:916): user pid=680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=681 suid=74 rport=41044 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.10.50.2 terminal=? res=success'
>type=USER_AUTH msg=audit(1432249714.808:917): user pid=680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.50.2 addr=10.10.50.2 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1432249714.811:918): user pid=680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.50.2 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1432249744.551:919): user pid=680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.50.2 addr=10.10.50.2 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1432249744.554:920): user pid=680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.50.2 addr=10.10.50.2 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1432249744.555:921): user pid=680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=681 suid=74 rport=41044 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.10.50.2 terminal=? res=success'
>type=USER_AUTH msg=audit(1432249744.555:922): user pid=680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.50.2 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1432249744.557:923): user pid=680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.50.2 addr=10.10.50.2 terminal=ssh res=success'
>type=LOGIN msg=audit(1432249744.558:924): pid=680 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=145
>type=USER_ROLE_CHANGE msg=audit(1432249744.790:925): user pid=680 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.50.2 addr=10.10.50.2 terminal=ssh res=success'
>type=USER_START msg=audit(1432249744.796:926): user pid=680 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.50.2 addr=10.10.50.2 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1432249745.763:927): user pid=686 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.50.2 addr=10.10.50.2 terminal=/dev/pts/0 res=success'
>type=USER_START msg=audit(1432249745.763:928): user pid=686 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.50.2 addr=10.10.50.2 terminal=/dev/pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1432249745.764:929): user pid=686 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=686 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.10.50.2 terminal=pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1432249745.764:930): user pid=686 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=686 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.10.50.2 terminal=pts/0 res=success'
>type=CRED_REFR msg=audit(1432249745.765:931): user pid=686 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.50.2 addr=10.10.50.2 terminal=ssh res=success'
>type=USER_CHAUTHTOK msg=audit(1432249788.854:932): user pid=706 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=PAM:chauthtok acct="root" exe="/usr/bin/passwd" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_CHAUTHTOK msg=audit(1432249788.855:933): user pid=706 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=change password id=0 exe="/usr/bin/passwd" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_ACCT msg=audit(1432249801.198:934): user pid=711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432249801.198:935): user pid=711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432249801.201:936): pid=711 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=146
>type=USER_START msg=audit(1432249801.207:937): user pid=711 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432249801.253:938): user pid=711 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432249801.254:939): user pid=711 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432250401.281:940): user pid=881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432250401.281:941): user pid=881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432250401.288:942): pid=881 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=147
>type=USER_START msg=audit(1432250401.298:943): user pid=881 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432250401.338:944): user pid=881 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432250401.339:945): user pid=881 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432251001.358:946): user pid=916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432251001.358:947): user pid=916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432251001.365:948): pid=916 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=148
>type=USER_START msg=audit(1432251001.371:949): user pid=916 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432251001.405:950): user pid=916 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432251001.405:951): user pid=916 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432251061.412:952): user pid=922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432251061.412:953): user pid=922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432251061.413:954): pid=922 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=149
>type=USER_START msg=audit(1432251061.418:955): user pid=922 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432251061.532:956): user pid=922 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432251061.533:957): user pid=922 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432251601.542:958): user pid=968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432251601.542:959): user pid=968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432251601.543:960): pid=968 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=150
>type=USER_START msg=audit(1432251601.550:961): user pid=968 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432251601.576:962): user pid=968 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432251601.576:963): user pid=968 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432252201.585:964): user pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432252201.586:965): user pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432252201.586:966): pid=989 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=151
>type=USER_START msg=audit(1432252201.594:967): user pid=989 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432252201.616:968): user pid=989 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432252201.616:969): user pid=989 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432252801.624:970): user pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432252801.625:971): user pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432252801.625:972): pid=1010 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=152
>type=USER_START msg=audit(1432252801.632:973): user pid=1010 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432252801.653:974): user pid=1010 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432252801.653:975): user pid=1010 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432253401.664:976): user pid=1034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432253401.664:977): user pid=1034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432253401.665:978): pid=1034 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=153
>type=USER_START msg=audit(1432253401.673:979): user pid=1034 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432253401.694:980): user pid=1034 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432253401.694:981): user pid=1034 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432254001.706:982): user pid=1060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432254001.706:983): user pid=1060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432254001.707:984): pid=1060 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=154
>type=USER_START msg=audit(1432254001.712:985): user pid=1060 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432254001.733:986): user pid=1060 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432254001.733:987): user pid=1060 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432254601.742:988): user pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432254601.743:989): user pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432254601.743:990): pid=1082 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=155
>type=USER_START msg=audit(1432254601.748:991): user pid=1082 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432254601.773:992): user pid=1082 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432254601.773:993): user pid=1082 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432254661.780:994): user pid=1090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432254661.780:995): user pid=1090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432254661.781:996): pid=1090 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=156
>type=USER_START msg=audit(1432254661.786:997): user pid=1090 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432254661.856:998): user pid=1090 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432254661.856:999): user pid=1090 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432255201.864:1000): user pid=1138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432255201.864:1001): user pid=1138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432255201.865:1002): pid=1138 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=157
>type=USER_START msg=audit(1432255201.870:1003): user pid=1138 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432255201.891:1004): user pid=1138 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432255201.891:1005): user pid=1138 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432255801.901:1006): user pid=1163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432255801.901:1007): user pid=1163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432255801.902:1008): pid=1163 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=158
>type=USER_START msg=audit(1432255801.908:1009): user pid=1163 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432255801.928:1010): user pid=1163 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432255801.928:1011): user pid=1163 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432256401.934:1012): user pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432256401.936:1013): user pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432256401.937:1014): pid=1184 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=159
>type=USER_START msg=audit(1432256401.942:1015): user pid=1184 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432256401.964:1016): user pid=1184 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432256401.966:1017): user pid=1184 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432257001.976:1018): user pid=1205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432257001.976:1019): user pid=1205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432257001.977:1020): pid=1205 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=160
>type=USER_START msg=audit(1432257001.982:1021): user pid=1205 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432257002.002:1022): user pid=1205 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432257002.003:1023): user pid=1205 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432257601.014:1024): user pid=1226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432257601.014:1025): user pid=1226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432257601.015:1026): pid=1226 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=161
>type=USER_START msg=audit(1432257601.023:1027): user pid=1226 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432257601.044:1028): user pid=1226 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432257601.044:1029): user pid=1226 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRYPTO_KEY_USER msg=audit(1432258086.303:1030): user pid=1244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=1244 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432258086.303:1031): user pid=1244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=1244 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432258086.305:1032): user pid=1243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=1244 suid=74 rport=36936 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432258086.305:1033): user pid=1243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=1244 suid=74 rport=36936 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=USER_AUTH msg=audit(1432258095.099:1034): user pid=1243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1432258095.103:1035): user pid=1243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1432258095.105:1036): user pid=1243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1244 suid=74 rport=36936 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=USER_AUTH msg=audit(1432258095.105:1037): user pid=1243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1432258095.107:1038): user pid=1243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=LOGIN msg=audit(1432258095.108:1039): pid=1243 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=162
>type=USER_ROLE_CHANGE msg=audit(1432258095.338:1040): user pid=1243 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=USER_START msg=audit(1432258095.346:1041): user pid=1243 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1432258095.356:1042): user pid=1248 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=/dev/pts/1 res=success'
>type=USER_START msg=audit(1432258095.357:1043): user pid=1248 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=/dev/pts/1 res=success'
>type=CRYPTO_KEY_USER msg=audit(1432258095.358:1044): user pid=1248 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=1248 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=pts/1 res=success'
>type=CRYPTO_KEY_USER msg=audit(1432258095.359:1045): user pid=1248 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=1248 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=pts/1 res=success'
>type=CRED_REFR msg=audit(1432258095.359:1046): user pid=1248 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1432258201.090:1047): user pid=1274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432258201.090:1048): user pid=1274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432258201.100:1049): pid=1274 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=163
>type=USER_START msg=audit(1432258201.109:1050): user pid=1274 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432258201.165:1051): user pid=1274 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432258201.165:1052): user pid=1274 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432258261.175:1053): user pid=1291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432258261.175:1054): user pid=1291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432258261.180:1055): pid=1291 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=164
>type=USER_START msg=audit(1432258261.187:1056): user pid=1291 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432258261.317:1057): user pid=1291 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432258261.319:1058): user pid=1291 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=MAC_POLICY_LOAD msg=audit(1432258296.317:1059): policy loaded auid=0 ses=162
>type=SYSCALL msg=audit(1432258296.317:1059): arch=c000003e syscall=1 success=yes exit=8358712 a0=4 a1=7f4735a23000 a2=7f8b38 a3=7ffd97915580 items=0 ppid=1329 pid=1335 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=162 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1432258514.857:1060): user pid=680 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.10.50.2 addr=10.10.50.2 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1432258514.858:1061): user pid=680 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.50.2 addr=10.10.50.2 terminal=ssh res=success'
>type=USER_END msg=audit(1432258514.859:1062): user pid=680 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_LOGOUT msg=audit(1432258514.860:1063): user pid=680 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1432258514.861:1064): user pid=680 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.10.50.2 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432258514.861:1065): user pid=680 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.10.50.2 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432258514.861:1066): user pid=680 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=680 suid=0 rport=41044 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.10.50.2 terminal=? res=success'
>type=USER_ACCT msg=audit(1432258801.366:1067): user pid=1411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432258801.367:1068): user pid=1411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432258801.369:1069): pid=1411 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=165
>type=USER_START msg=audit(1432258801.379:1070): user pid=1411 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432258801.433:1071): user pid=1411 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432258801.433:1072): user pid=1411 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432259401.448:1073): user pid=1439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432259401.448:1074): user pid=1439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432259401.455:1075): pid=1439 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=166
>type=USER_START msg=audit(1432259401.460:1076): user pid=1439 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432259401.485:1077): user pid=1439 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432259401.485:1078): user pid=1439 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432260001.526:1079): user pid=1560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432260001.527:1080): user pid=1560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432260001.530:1081): pid=1560 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=167
>type=USER_START msg=audit(1432260001.540:1082): user pid=1560 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432260001.590:1083): user pid=1560 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432260001.590:1084): user pid=1560 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432260601.610:1085): user pid=1583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432260601.611:1086): user pid=1583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432260601.611:1087): pid=1583 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=168
>type=USER_START msg=audit(1432260601.618:1088): user pid=1583 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432260601.650:1089): user pid=1583 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432260601.650:1090): user pid=1583 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432261201.659:1091): user pid=1605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432261201.659:1092): user pid=1605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432261201.659:1093): pid=1605 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=169
>type=USER_START msg=audit(1432261201.665:1094): user pid=1605 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432261201.695:1095): user pid=1605 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432261201.695:1096): user pid=1605 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432261801.704:1097): user pid=1629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432261801.704:1098): user pid=1629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432261801.705:1099): pid=1629 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=170
>type=USER_START msg=audit(1432261801.711:1100): user pid=1629 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432261801.731:1101): user pid=1629 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432261801.732:1102): user pid=1629 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432261861.737:1103): user pid=1635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432261861.737:1104): user pid=1635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432261861.737:1105): pid=1635 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=171
>type=USER_START msg=audit(1432261861.745:1106): user pid=1635 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432261861.860:1107): user pid=1635 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432261861.860:1108): user pid=1635 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432262401.868:1109): user pid=1686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432262401.868:1110): user pid=1686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432262401.868:1111): pid=1686 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=172
>type=USER_START msg=audit(1432262401.876:1112): user pid=1686 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432262401.905:1113): user pid=1686 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432262401.905:1114): user pid=1686 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432263001.916:1115): user pid=1741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432263001.917:1116): user pid=1741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432263001.917:1117): pid=1741 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=173
>type=USER_START msg=audit(1432263001.925:1118): user pid=1741 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432263001.950:1119): user pid=1741 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432263001.950:1120): user pid=1741 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432263601.960:1121): user pid=1762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432263601.960:1122): user pid=1762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432263601.961:1123): pid=1762 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=174
>type=USER_START msg=audit(1432263601.967:1124): user pid=1762 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432263601.988:1125): user pid=1762 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432263601.988:1126): user pid=1762 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432264201.996:1127): user pid=1783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432264201.996:1128): user pid=1783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432264201.996:1129): pid=1783 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=175
>type=USER_START msg=audit(1432264202.003:1130): user pid=1783 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432264202.032:1131): user pid=1783 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432264202.032:1132): user pid=1783 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432264801.041:1133): user pid=1804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432264801.041:1134): user pid=1804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432264801.042:1135): pid=1804 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=176
>type=USER_START msg=audit(1432264801.048:1136): user pid=1804 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432264801.069:1137): user pid=1804 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432264801.069:1138): user pid=1804 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432265401.078:1139): user pid=1825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432265401.078:1140): user pid=1825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432265401.078:1141): pid=1825 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=177
>type=USER_START msg=audit(1432265401.084:1142): user pid=1825 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432265401.107:1143): user pid=1825 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432265401.107:1144): user pid=1825 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432265461.113:1145): user pid=1831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432265461.113:1146): user pid=1831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432265461.114:1147): pid=1831 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=178
>type=USER_START msg=audit(1432265461.121:1148): user pid=1831 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432265461.188:1149): user pid=1831 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432265461.188:1150): user pid=1831 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432266001.199:1151): user pid=1877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432266001.199:1152): user pid=1877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432266001.202:1153): pid=1877 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=179
>type=USER_START msg=audit(1432266001.210:1154): user pid=1877 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432266001.245:1155): user pid=1877 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432266001.245:1156): user pid=1877 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432266601.255:1157): user pid=1899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432266601.256:1158): user pid=1899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432266601.257:1159): pid=1899 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=180
>type=USER_START msg=audit(1432266601.262:1160): user pid=1899 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432266601.289:1161): user pid=1899 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432266601.289:1162): user pid=1899 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432267201.297:1163): user pid=1920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432267201.298:1164): user pid=1920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432267201.298:1165): pid=1920 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=181
>type=USER_START msg=audit(1432267201.304:1166): user pid=1920 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432267201.325:1167): user pid=1920 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432267201.325:1168): user pid=1920 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432267801.334:1169): user pid=1941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432267801.334:1170): user pid=1941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432267801.335:1171): pid=1941 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=182
>type=USER_START msg=audit(1432267801.342:1172): user pid=1941 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432267801.371:1173): user pid=1941 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432267801.371:1174): user pid=1941 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432268401.380:1175): user pid=1962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432268401.380:1176): user pid=1962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432268401.380:1177): pid=1962 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=183
>type=USER_START msg=audit(1432268401.388:1178): user pid=1962 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432268401.412:1179): user pid=1962 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432268401.412:1180): user pid=1962 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432269001.422:1181): user pid=1983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432269001.423:1182): user pid=1983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432269001.423:1183): pid=1983 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=184
>type=USER_START msg=audit(1432269001.430:1184): user pid=1983 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432269001.451:1185): user pid=1983 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432269001.451:1186): user pid=1983 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432269061.456:1187): user pid=1989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432269061.457:1188): user pid=1989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432269061.457:1189): pid=1989 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=185
>type=USER_START msg=audit(1432269061.463:1190): user pid=1989 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432269061.527:1191): user pid=1989 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432269061.527:1192): user pid=1989 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432269601.559:1193): user pid=2086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432269601.559:1194): user pid=2086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432269601.561:1195): pid=2086 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=186
>type=USER_START msg=audit(1432269601.568:1196): user pid=2086 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432269601.594:1197): user pid=2086 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432269601.595:1198): user pid=2086 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=AVC msg=audit(1432269738.344:1199): avc:  denied  { write } for  pid=2322 comm="glusterd" name="glusterd.socket" dev=dm-0 ino=917550 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432269738.344:1199): arch=c000003e syscall=42 success=no exit=-111 a0=c a1=7ffee3e381a0 a2=6e a3=7f27e4361873 items=0 ppid=2321 pid=2322 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="glusterd" exe="/usr/sbin/glusterfsd" subj=unconfined_u:system_r:glusterd_t:s0 key=(null)
>type=AVC msg=audit(1432269738.345:1200): avc:  denied  { unlink } for  pid=2322 comm="glusterd" name="glusterd.socket" dev=dm-0 ino=917550 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432269738.345:1200): arch=c000003e syscall=87 success=yes exit=0 a0=7ffee3e381a2 a1=7ffee3e381a0 a2=6f a3=7f27e4361873 items=0 ppid=2321 pid=2322 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="glusterd" exe="/usr/sbin/glusterfsd" subj=unconfined_u:system_r:glusterd_t:s0 key=(null)
>type=AVC msg=audit(1432269763.874:1201): avc:  denied  { execute } for  pid=2436 comm="S30samba-start." name="smb" dev=dm-0 ino=392444 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:samba_initrc_exec_t:s0 tclass=file
>type=AVC msg=audit(1432269763.874:1201): avc:  denied  { execute_no_trans } for  pid=2436 comm="S30samba-start." path="/etc/rc.d/init.d/smb" dev=dm-0 ino=392444 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:samba_initrc_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1432269763.874:1201): arch=c000003e syscall=59 success=yes exit=0 a0=1faf810 a1=1faa4e0 a2=1fb0390 a3=18 items=0 ppid=2403 pid=2436 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smb" exe="/bin/bash" subj=unconfined_u:system_r:glusterd_t:s0 key=(null)
>type=AVC msg=audit(1432269763.877:1202): avc:  denied  { execute } for  pid=2438 comm="smb" name="consoletype" dev=dm-0 ino=50 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:consoletype_exec_t:s0 tclass=file
>type=AVC msg=audit(1432269763.877:1202): avc:  denied  { execute_no_trans } for  pid=2438 comm="smb" path="/sbin/consoletype" dev=dm-0 ino=50 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:consoletype_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1432269763.877:1202): arch=c000003e syscall=59 success=yes exit=0 a0=1fb1760 a1=1fb17c0 a2=1fb1820 a3=10 items=0 ppid=2437 pid=2438 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="consoletype" exe="/sbin/consoletype" subj=unconfined_u:system_r:glusterd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1432270201.641:1203): user pid=2532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432270201.642:1204): user pid=2532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432270201.651:1205): pid=2532 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=187
>type=USER_START msg=audit(1432270201.657:1206): user pid=2532 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432270201.715:1207): user pid=2532 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432270201.715:1208): user pid=2532 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRYPTO_KEY_USER msg=audit(1432270412.554:1209): user pid=2543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=2543 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432270412.554:1210): user pid=2543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=2543 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432270412.819:1211): user pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=2543 suid=74 rport=45969 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432270412.820:1212): user pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=2543 suid=74 rport=45969 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432270413.632:1213): user pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2543 suid=74 rport=45969 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432270413.632:1214): user pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=2542 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432270413.632:1215): user pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=2542 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=USER_LOGIN msg=audit(1432270413.633:1216): user pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=ssh res=failed'
>type=CRYPTO_KEY_USER msg=audit(1432270454.744:1217): user pid=2546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=2546 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432270454.744:1218): user pid=2546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=2546 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432270455.011:1219): user pid=2545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=2546 suid=74 rport=45973 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432270455.011:1220): user pid=2545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=2546 suid=74 rport=45973 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=USER_AUTH msg=audit(1432270459.315:1221): user pid=2545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1432270465.584:1222): user pid=2545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=vpn1-6-110.ams2.redhat.com addr=10.36.6.110 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1432270465.585:1223): user pid=2545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1432270467.678:1224): user pid=2545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=vpn1-6-110.ams2.redhat.com addr=10.36.6.110 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1432270467.682:1225): user pid=2545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=vpn1-6-110.ams2.redhat.com addr=10.36.6.110 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1432270467.682:1226): user pid=2545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2546 suid=74 rport=45973 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=USER_AUTH msg=audit(1432270467.683:1227): user pid=2545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1432270467.684:1228): user pid=2545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=vpn1-6-110.ams2.redhat.com addr=10.36.6.110 terminal=ssh res=success'
>type=LOGIN msg=audit(1432270467.684:1229): pid=2545 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=188
>type=USER_ROLE_CHANGE msg=audit(1432270467.919:1230): user pid=2545 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=vpn1-6-110.ams2.redhat.com addr=10.36.6.110 terminal=ssh res=success'
>type=USER_START msg=audit(1432270467.927:1231): user pid=2545 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=vpn1-6-110.ams2.redhat.com addr=10.36.6.110 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1432270468.220:1232): user pid=2551 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=vpn1-6-110.ams2.redhat.com addr=10.36.6.110 terminal=/dev/pts/0 res=success'
>type=USER_START msg=audit(1432270468.221:1233): user pid=2551 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=vpn1-6-110.ams2.redhat.com addr=10.36.6.110 terminal=/dev/pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1432270468.222:1234): user pid=2551 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=2551 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1432270468.222:1235): user pid=2551 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=2551 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=pts/0 res=success'
>type=CRED_REFR msg=audit(1432270468.223:1236): user pid=2551 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=vpn1-6-110.ams2.redhat.com addr=10.36.6.110 terminal=ssh res=success'
>type=USER_CHAUTHTOK msg=audit(1432270507.218:1237): user pid=2571 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=PAM:chauthtok acct="root" exe="/usr/bin/passwd" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_CHAUTHTOK msg=audit(1432270507.219:1238): user pid=2571 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=change password id=0 exe="/usr/bin/passwd" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1432270533.676:1239): user pid=2545 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_LOGOUT msg=audit(1432270533.676:1240): user pid=2545 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_END msg=audit(1432270533.948:1241): user pid=2545 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=vpn1-6-110.ams2.redhat.com addr=10.36.6.110 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1432270533.948:1242): user pid=2545 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=vpn1-6-110.ams2.redhat.com addr=10.36.6.110 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1432270533.949:1243): user pid=2545 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=2545 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432270533.949:1244): user pid=2545 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=2545 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432270533.951:1245): user pid=2545 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2545 suid=0 rport=45973 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.36.6.110 terminal=? res=success'
>type=USER_ACCT msg=audit(1432270801.766:1246): user pid=2583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432270801.766:1247): user pid=2583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432270801.769:1248): pid=2583 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=189
>type=USER_START msg=audit(1432270801.779:1249): user pid=2583 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432270801.833:1250): user pid=2583 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432270801.833:1251): user pid=2583 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432271401.844:1252): user pid=2606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432271401.844:1253): user pid=2606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432271401.846:1254): pid=2606 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=190
>type=USER_START msg=audit(1432271401.849:1255): user pid=2606 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432271401.881:1256): user pid=2606 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432271401.881:1257): user pid=2606 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432272001.889:1258): user pid=2627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432272001.889:1259): user pid=2627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432272001.890:1260): pid=2627 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=191
>type=USER_START msg=audit(1432272001.896:1261): user pid=2627 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432272001.909:1262): user pid=2627 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432272001.909:1263): user pid=2627 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432272601.935:1264): user pid=2656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432272601.935:1265): user pid=2656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432272601.937:1266): pid=2656 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=192
>type=USER_START msg=audit(1432272601.945:1267): user pid=2656 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432272601.971:1268): user pid=2656 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432272601.971:1269): user pid=2656 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1432272661.980:1270): user pid=2662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432272661.980:1271): user pid=2662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432272661.981:1272): pid=2662 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=193
>type=USER_START msg=audit(1432272661.986:1273): user pid=2662 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432272662.100:1274): user pid=2662 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432272662.100:1275): user pid=2662 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=AVC msg=audit(1432273100.480:1276): avc:  denied  { name_bind } for  pid=2752 comm="smbd" src=1023 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1432273100.480:1276): arch=c000003e syscall=49 success=no exit=-13 a0=1f a1=7f4c1ef3ccd0 a2=10 a3=4a items=0 ppid=2738 pid=2752 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432273100.480:1277): avc:  denied  { name_connect } for  pid=2752 comm="smbd" dest=24007 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:gluster_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1432273100.480:1277): arch=c000003e syscall=42 success=no exit=-13 a0=1f a1=7f4c1ef3c7d8 a2=10 a3=0 items=0 ppid=2738 pid=2752 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432273156.921:1278): avc:  denied  { name_bind } for  pid=2831 comm="smbd" src=1023 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1432273156.921:1278): arch=c000003e syscall=49 success=no exit=-13 a0=1f a1=7f5ec4862c40 a2=10 a3=4a items=0 ppid=2826 pid=2831 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432273156.922:1279): avc:  denied  { name_connect } for  pid=2831 comm="smbd" dest=24007 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:gluster_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1432273156.922:1279): arch=c000003e syscall=42 success=no exit=-13 a0=1f a1=7f5ec4862748 a2=10 a3=0 items=0 ppid=2826 pid=2831 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1432273201.137:1280): user pid=2841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432273201.137:1281): user pid=2841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432273201.147:1282): pid=2841 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=194
>type=USER_START msg=audit(1432273201.153:1283): user pid=2841 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432273201.202:1284): user pid=2841 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432273201.202:1285): user pid=2841 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=MAC_CONFIG_CHANGE msg=audit(1432273448.712:1286): bool=samba_load_libgfapi val=1 old_val=0 auid=0 ses=162
>type=SYSCALL msg=audit(1432273448.712:1286): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7ffedd516af0 a2=2 a3=0 items=0 ppid=1248 pid=2861 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=162 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1432273629.751:1287): avc:  denied  { execute } for  pid=2925 comm="service" name="consoletype" dev=dm-0 ino=50 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:consoletype_exec_t:s0 tclass=file
>type=AVC msg=audit(1432273629.751:1287): avc:  denied  { execute_no_trans } for  pid=2925 comm="service" path="/sbin/consoletype" dev=dm-0 ino=50 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:consoletype_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1432273629.751:1287): arch=c000003e syscall=59 success=yes exit=0 a0=234bc40 a1=234bca0 a2=234bd00 a3=10 items=0 ppid=2923 pid=2925 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="consoletype" exe="/sbin/consoletype" subj=unconfined_u:system_r:glusterd_t:s0 key=(null)
>type=AVC msg=audit(1432273629.776:1288): avc:  denied  { execute } for  pid=2931 comm="env" name="smb" dev=dm-0 ino=392444 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:samba_initrc_exec_t:s0 tclass=file
>type=AVC msg=audit(1432273629.776:1288): avc:  denied  { execute_no_trans } for  pid=2931 comm="env" path="/etc/rc.d/init.d/smb" dev=dm-0 ino=392444 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:samba_initrc_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1432273629.776:1288): arch=c000003e syscall=59 success=yes exit=0 a0=7ffe20f60f42 a1=7ffe20f60668 a2=230c030 a3=ffffff80 items=0 ppid=2920 pid=2931 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smb" exe="/bin/bash" subj=unconfined_u:system_r:glusterd_t:s0 key=(null)
>type=AVC msg=audit(1432273629.997:1289): avc:  denied  { create } for  pid=2945 comm="sed" name="sedYN6z1y" scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:samba_etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1432273629.997:1289): arch=c000003e syscall=2 success=yes exit=4 a0=1fc2b10 a1=c2 a2=180 a3=0 items=0 ppid=2911 pid=2945 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="sed" exe="/bin/sed" subj=unconfined_u:system_r:glusterd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1432273801.257:1290): user pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432273801.257:1291): user pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432273801.260:1292): pid=3263 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=195
>type=USER_START msg=audit(1432273801.268:1293): user pid=3263 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432273801.313:1294): user pid=3263 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432273801.313:1295): user pid=3263 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=AVC msg=audit(1432273928.968:1296): avc:  denied  { create } for  pid=3641 comm="sed" name="sed0r0gFD" scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1432273928.968:1296): arch=c000003e syscall=2 success=yes exit=4 a0=662180 a1=c2 a2=180 a3=0 items=0 ppid=3632 pid=3641 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="sed" exe="/bin/sed" subj=unconfined_u:system_r:glusterd_t:s0 key=(null)
>type=AVC msg=audit(1432273929.081:1297): avc:  denied  { execute } for  pid=3657 comm="S30samba-stop.s" name="smb" dev=dm-0 ino=392444 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:samba_initrc_exec_t:s0 tclass=file
>type=AVC msg=audit(1432273929.081:1297): avc:  denied  { execute_no_trans } for  pid=3657 comm="S30samba-stop.s" path="/etc/rc.d/init.d/smb" dev=dm-0 ino=392444 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:samba_initrc_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1432273929.081:1297): arch=c000003e syscall=59 success=yes exit=0 a0=fd8080 a1=fd5eb0 a2=fd7ba0 a3=18 items=0 ppid=3643 pid=3657 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smb" exe="/bin/bash" subj=unconfined_u:system_r:glusterd_t:s0 key=(null)
>type=AVC msg=audit(1432274016.175:1298): avc:  denied  { execute } for  pid=3769 comm="env" name="smb" dev=dm-0 ino=392444 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:samba_initrc_exec_t:s0 tclass=file
>type=AVC msg=audit(1432274016.175:1298): avc:  denied  { execute_no_trans } for  pid=3769 comm="env" path="/etc/rc.d/init.d/smb" dev=dm-0 ino=392444 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:samba_initrc_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1432274016.175:1298): arch=c000003e syscall=59 success=yes exit=0 a0=7ffeaaa1ff42 a1=7ffeaaa1e818 a2=2168030 a3=ffffff80 items=0 ppid=3758 pid=3769 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smb" exe="/bin/bash" subj=unconfined_u:system_r:glusterd_t:s0 key=(null)
>type=AVC msg=audit(1432274016.302:1299): avc:  denied  { execute } for  pid=3769 comm="smb" name="plymouth" dev=dm-0 ino=109 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:plymouth_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1432274016.302:1299): arch=c000003e syscall=21 success=yes exit=0 a0=204bf10 a1=1 a2=0 a3=8 items=0 ppid=3758 pid=3769 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smb" exe="/bin/bash" subj=unconfined_u:system_r:glusterd_t:s0 key=(null)
>type=AVC msg=audit(1432274016.303:1300): avc:  denied  { execute_no_trans } for  pid=3785 comm="smb" path="/bin/plymouth" dev=dm-0 ino=109 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:plymouth_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1432274016.303:1300): arch=c000003e syscall=59 success=yes exit=0 a0=204bf50 a1=204c490 a2=204a7b0 a3=18 items=0 ppid=3769 pid=3785 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="plymouth" exe="/bin/plymouth" subj=unconfined_u:system_r:glusterd_t:s0 key=(null)
>type=AVC msg=audit(1432274021.740:1301): avc:  denied  { execute } for  pid=3898 comm="smb" name="consoletype" dev=dm-0 ino=50 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:consoletype_exec_t:s0 tclass=file
>type=AVC msg=audit(1432274021.740:1301): avc:  denied  { execute_no_trans } for  pid=3898 comm="smb" path="/sbin/consoletype" dev=dm-0 ino=50 scontext=unconfined_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:consoletype_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1432274021.740:1301): arch=c000003e syscall=59 success=yes exit=0 a0=16ff760 a1=16ff7c0 a2=16ff820 a3=10 items=0 ppid=3897 pid=3898 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="consoletype" exe="/sbin/consoletype" subj=unconfined_u:system_r:glusterd_t:s0 key=(null)
>type=AVC msg=audit(1432274052.032:1302): avc:  denied  { write } for  pid=4349 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274052.032:1302): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff06e683b0 a2=6e a3=0 items=0 ppid=4323 pid=4349 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274052.033:1303): avc:  denied  { getattr } for  pid=4349 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274052.033:1303): arch=c000003e syscall=4 success=no exit=-13 a0=7faa8cdee000 a1=7fff06e68230 a2=7fff06e68230 a3=0 items=0 ppid=4323 pid=4349 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274052.119:1304): avc:  denied  { write } for  pid=4364 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274052.119:1304): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffb74c2980 a2=6e a3=0 items=0 ppid=4363 pid=4364 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274057.463:1305): avc:  denied  { write } for  pid=4452 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274057.463:1305): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffd76f4fb90 a2=6e a3=0 items=0 ppid=4426 pid=4452 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274057.464:1306): avc:  denied  { getattr } for  pid=4452 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274057.464:1306): arch=c000003e syscall=4 success=no exit=-13 a0=7fa7188fd000 a1=7ffd76f4fa10 a2=7ffd76f4fa10 a3=0 items=0 ppid=4426 pid=4452 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274057.547:1307): avc:  denied  { write } for  pid=4467 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274057.547:1307): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcd594bc40 a2=6e a3=0 items=0 ppid=4466 pid=4467 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274062.860:1308): avc:  denied  { write } for  pid=4613 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274062.860:1308): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffda5980390 a2=6e a3=0 items=0 ppid=4587 pid=4613 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274062.860:1309): avc:  denied  { getattr } for  pid=4613 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274062.860:1309): arch=c000003e syscall=4 success=no exit=-13 a0=7f801ccec000 a1=7ffda5980210 a2=7ffda5980210 a3=0 items=0 ppid=4587 pid=4613 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274062.949:1310): avc:  denied  { write } for  pid=4628 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274062.949:1310): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffffc43f230 a2=6e a3=0 items=0 ppid=4627 pid=4628 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274068.255:1311): avc:  denied  { write } for  pid=4775 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274068.255:1311): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff119999c0 a2=6e a3=0 items=0 ppid=4749 pid=4775 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274068.255:1312): avc:  denied  { getattr } for  pid=4775 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274068.255:1312): arch=c000003e syscall=4 success=no exit=-13 a0=7f313dc8b000 a1=7fff11999840 a2=7fff11999840 a3=0 items=0 ppid=4749 pid=4775 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274068.335:1313): avc:  denied  { write } for  pid=4790 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274068.335:1313): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffbabcb990 a2=6e a3=0 items=0 ppid=4789 pid=4790 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274073.642:1314): avc:  denied  { write } for  pid=4894 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274073.642:1314): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffeca51d880 a2=6e a3=0 items=0 ppid=4868 pid=4894 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274073.642:1315): avc:  denied  { getattr } for  pid=4894 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274073.642:1315): arch=c000003e syscall=4 success=no exit=-13 a0=7fcab44c9000 a1=7ffeca51d700 a2=7ffeca51d700 a3=0 items=0 ppid=4868 pid=4894 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274073.728:1316): avc:  denied  { write } for  pid=4909 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274073.728:1316): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffca3569590 a2=6e a3=0 items=0 ppid=4908 pid=4909 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274079.038:1317): avc:  denied  { write } for  pid=5012 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274079.038:1317): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffcb6772100 a2=6e a3=0 items=0 ppid=4986 pid=5012 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274079.038:1318): avc:  denied  { getattr } for  pid=5012 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274079.038:1318): arch=c000003e syscall=4 success=no exit=-13 a0=7f8e9c00f000 a1=7ffcb6771f80 a2=7ffcb6771f80 a3=0 items=0 ppid=4986 pid=5012 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274079.118:1319): avc:  denied  { write } for  pid=5027 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274079.118:1319): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd893a9e10 a2=6e a3=0 items=0 ppid=5026 pid=5027 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274084.427:1320): avc:  denied  { write } for  pid=5116 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274084.427:1320): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffee5d973d0 a2=6e a3=0 items=0 ppid=5090 pid=5116 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274084.427:1321): avc:  denied  { getattr } for  pid=5116 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274084.427:1321): arch=c000003e syscall=4 success=no exit=-13 a0=7f890f181000 a1=7ffee5d97250 a2=7ffee5d97250 a3=0 items=0 ppid=5090 pid=5116 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274084.508:1322): avc:  denied  { write } for  pid=5131 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274084.508:1322): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcce0ce780 a2=6e a3=0 items=0 ppid=5130 pid=5131 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274089.824:1323): avc:  denied  { write } for  pid=5219 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274089.824:1323): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffe9776e0f0 a2=6e a3=0 items=0 ppid=5193 pid=5219 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274089.824:1324): avc:  denied  { getattr } for  pid=5219 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274089.824:1324): arch=c000003e syscall=4 success=no exit=-13 a0=7f8ee1f00000 a1=7ffe9776df70 a2=7ffe9776df70 a3=0 items=0 ppid=5193 pid=5219 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274089.905:1325): avc:  denied  { write } for  pid=5234 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274089.905:1325): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd420cc8f0 a2=6e a3=0 items=0 ppid=5233 pid=5234 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274095.204:1326): avc:  denied  { write } for  pid=5322 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274095.204:1326): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffcb792b9b0 a2=6e a3=0 items=0 ppid=5296 pid=5322 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274095.204:1327): avc:  denied  { getattr } for  pid=5322 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274095.204:1327): arch=c000003e syscall=4 success=no exit=-13 a0=7ff555419000 a1=7ffcb792b830 a2=7ffcb792b830 a3=0 items=0 ppid=5296 pid=5322 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274095.285:1328): avc:  denied  { write } for  pid=5337 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274095.285:1328): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd6fc51690 a2=6e a3=0 items=0 ppid=5336 pid=5337 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274100.589:1329): avc:  denied  { write } for  pid=5427 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274100.589:1329): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffea8ed38c0 a2=6e a3=0 items=0 ppid=5401 pid=5427 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274100.589:1330): avc:  denied  { getattr } for  pid=5427 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274100.589:1330): arch=c000003e syscall=4 success=no exit=-13 a0=7f3fd1ef3000 a1=7ffea8ed3740 a2=7ffea8ed3740 a3=0 items=0 ppid=5401 pid=5427 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274100.670:1331): avc:  denied  { write } for  pid=5442 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274100.670:1331): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe92bf4d00 a2=6e a3=0 items=0 ppid=5441 pid=5442 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274105.984:1332): avc:  denied  { write } for  pid=5530 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274105.984:1332): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffcfa216870 a2=6e a3=0 items=0 ppid=5504 pid=5530 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274105.985:1333): avc:  denied  { getattr } for  pid=5530 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274105.985:1333): arch=c000003e syscall=4 success=no exit=-13 a0=7f8707faf000 a1=7ffcfa2166f0 a2=7ffcfa2166f0 a3=0 items=0 ppid=5504 pid=5530 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274106.065:1334): avc:  denied  { write } for  pid=5545 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274106.065:1334): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffeead453e0 a2=6e a3=0 items=0 ppid=5544 pid=5545 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274111.370:1335): avc:  denied  { write } for  pid=5634 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274111.370:1335): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff9dbb9570 a2=6e a3=0 items=0 ppid=5608 pid=5634 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274111.370:1336): avc:  denied  { getattr } for  pid=5634 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274111.370:1336): arch=c000003e syscall=4 success=no exit=-13 a0=7f6f3ed30000 a1=7fff9dbb93f0 a2=7fff9dbb93f0 a3=0 items=0 ppid=5608 pid=5634 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274111.454:1337): avc:  denied  { write } for  pid=5649 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274111.454:1337): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffebbf22130 a2=6e a3=0 items=0 ppid=5648 pid=5649 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274116.758:1338): avc:  denied  { write } for  pid=5738 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274116.758:1338): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffe422c5510 a2=6e a3=0 items=0 ppid=5711 pid=5738 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274116.758:1339): avc:  denied  { getattr } for  pid=5738 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274116.758:1339): arch=c000003e syscall=4 success=no exit=-13 a0=7f576c073000 a1=7ffe422c5390 a2=7ffe422c5390 a3=0 items=0 ppid=5711 pid=5738 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274116.840:1340): avc:  denied  { write } for  pid=5753 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274116.840:1340): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe10b76b00 a2=6e a3=0 items=0 ppid=5752 pid=5753 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274122.140:1341): avc:  denied  { write } for  pid=5844 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274122.140:1341): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffe3bdd75c0 a2=6e a3=0 items=0 ppid=5818 pid=5844 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274122.141:1342): avc:  denied  { getattr } for  pid=5844 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274122.141:1342): arch=c000003e syscall=4 success=no exit=-13 a0=7f8300d21000 a1=7ffe3bdd7440 a2=7ffe3bdd7440 a3=0 items=0 ppid=5818 pid=5844 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274122.221:1343): avc:  denied  { write } for  pid=5859 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274122.221:1343): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff691fe9c0 a2=6e a3=0 items=0 ppid=5858 pid=5859 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274127.523:1344): avc:  denied  { write } for  pid=5952 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274127.523:1344): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffeb2801480 a2=6e a3=0 items=0 ppid=5925 pid=5952 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274127.523:1345): avc:  denied  { getattr } for  pid=5952 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274127.523:1345): arch=c000003e syscall=4 success=no exit=-13 a0=7f4f96802000 a1=7ffeb2801300 a2=7ffeb2801300 a3=0 items=0 ppid=5925 pid=5952 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274127.603:1346): avc:  denied  { write } for  pid=5968 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274127.603:1346): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc6baad0d0 a2=6e a3=0 items=0 ppid=5967 pid=5968 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274132.906:1347): avc:  denied  { write } for  pid=6063 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274132.906:1347): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff682c2700 a2=6e a3=0 items=0 ppid=6037 pid=6063 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274132.907:1348): avc:  denied  { getattr } for  pid=6063 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274132.907:1348): arch=c000003e syscall=4 success=no exit=-13 a0=7fdabbaa1000 a1=7fff682c2580 a2=7fff682c2580 a3=0 items=0 ppid=6037 pid=6063 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274132.987:1349): avc:  denied  { write } for  pid=6078 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274132.987:1349): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff589f8b30 a2=6e a3=0 items=0 ppid=6077 pid=6078 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274138.290:1350): avc:  denied  { write } for  pid=6166 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274138.290:1350): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffe4d6d8c90 a2=6e a3=0 items=0 ppid=6140 pid=6166 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274138.291:1351): avc:  denied  { getattr } for  pid=6166 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274138.291:1351): arch=c000003e syscall=4 success=no exit=-13 a0=7f444fa8a000 a1=7ffe4d6d8b10 a2=7ffe4d6d8b10 a3=0 items=0 ppid=6140 pid=6166 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274138.371:1352): avc:  denied  { write } for  pid=6181 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274138.371:1352): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff9aceb700 a2=6e a3=0 items=0 ppid=6180 pid=6181 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274143.683:1353): avc:  denied  { write } for  pid=6270 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274143.683:1353): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffcde6e4570 a2=6e a3=0 items=0 ppid=6244 pid=6270 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274143.684:1354): avc:  denied  { getattr } for  pid=6270 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274143.684:1354): arch=c000003e syscall=4 success=no exit=-13 a0=7fa4e85f7000 a1=7ffcde6e43f0 a2=7ffcde6e43f0 a3=0 items=0 ppid=6244 pid=6270 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274143.764:1355): avc:  denied  { write } for  pid=6285 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274143.764:1355): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffcb27e650 a2=6e a3=0 items=0 ppid=6284 pid=6285 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274149.067:1356): avc:  denied  { write } for  pid=6374 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274149.067:1356): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffd299926c0 a2=6e a3=0 items=0 ppid=6348 pid=6374 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274149.067:1357): avc:  denied  { getattr } for  pid=6374 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274149.067:1357): arch=c000003e syscall=4 success=no exit=-13 a0=7f44f1b30000 a1=7ffd29992540 a2=7ffd29992540 a3=0 items=0 ppid=6348 pid=6374 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274149.147:1358): avc:  denied  { write } for  pid=6389 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274149.147:1358): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffda83bc890 a2=6e a3=0 items=0 ppid=6388 pid=6389 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274154.447:1359): avc:  denied  { write } for  pid=6477 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274154.447:1359): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff568925f0 a2=6e a3=0 items=0 ppid=6451 pid=6477 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274154.448:1360): avc:  denied  { getattr } for  pid=6477 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274154.448:1360): arch=c000003e syscall=4 success=no exit=-13 a0=7f7786b5a000 a1=7fff56892470 a2=7fff56892470 a3=0 items=0 ppid=6451 pid=6477 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274154.528:1361): avc:  denied  { write } for  pid=6492 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274154.528:1361): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdeaaa9980 a2=6e a3=0 items=0 ppid=6491 pid=6492 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274159.832:1362): avc:  denied  { write } for  pid=6580 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274159.832:1362): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fffb24be780 a2=6e a3=0 items=0 ppid=6554 pid=6580 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274159.833:1363): avc:  denied  { getattr } for  pid=6580 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274159.833:1363): arch=c000003e syscall=4 success=no exit=-13 a0=7f01987d4000 a1=7fffb24be600 a2=7fffb24be600 a3=0 items=0 ppid=6554 pid=6580 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274159.913:1364): avc:  denied  { write } for  pid=6595 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274159.913:1364): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffded6f550 a2=6e a3=0 items=0 ppid=6594 pid=6595 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274165.216:1365): avc:  denied  { write } for  pid=6683 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274165.216:1365): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffe7769e300 a2=6e a3=0 items=0 ppid=6657 pid=6683 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274165.216:1366): avc:  denied  { getattr } for  pid=6683 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274165.216:1366): arch=c000003e syscall=4 success=no exit=-13 a0=7f4bc3098000 a1=7ffe7769e180 a2=7ffe7769e180 a3=0 items=0 ppid=6657 pid=6683 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274165.296:1367): avc:  denied  { write } for  pid=6698 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274165.296:1367): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe463e2460 a2=6e a3=0 items=0 ppid=6697 pid=6698 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274170.601:1368): avc:  denied  { write } for  pid=6786 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274170.601:1368): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff7e9a7e00 a2=6e a3=0 items=0 ppid=6760 pid=6786 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274170.602:1369): avc:  denied  { getattr } for  pid=6786 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274170.602:1369): arch=c000003e syscall=4 success=no exit=-13 a0=7fca8bec0000 a1=7fff7e9a7c80 a2=7fff7e9a7c80 a3=0 items=0 ppid=6760 pid=6786 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274170.683:1370): avc:  denied  { write } for  pid=6801 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274170.683:1370): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdcddca3f0 a2=6e a3=0 items=0 ppid=6800 pid=6801 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274175.985:1371): avc:  denied  { write } for  pid=6891 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274175.985:1371): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffcc76fdd70 a2=6e a3=0 items=0 ppid=6865 pid=6891 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274175.986:1372): avc:  denied  { getattr } for  pid=6891 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274175.986:1372): arch=c000003e syscall=4 success=no exit=-13 a0=7ff55fe09000 a1=7ffcc76fdbf0 a2=7ffcc76fdbf0 a3=0 items=0 ppid=6865 pid=6891 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274176.065:1373): avc:  denied  { write } for  pid=6906 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274176.065:1373): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff18068990 a2=6e a3=0 items=0 ppid=6905 pid=6906 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274181.368:1374): avc:  denied  { write } for  pid=6994 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274181.368:1374): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffd86909550 a2=6e a3=0 items=0 ppid=6968 pid=6994 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274181.369:1375): avc:  denied  { getattr } for  pid=6994 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274181.369:1375): arch=c000003e syscall=4 success=no exit=-13 a0=7f1642986000 a1=7ffd869093d0 a2=7ffd869093d0 a3=0 items=0 ppid=6968 pid=6994 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274181.450:1376): avc:  denied  { write } for  pid=7009 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274181.450:1376): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe5fec1000 a2=6e a3=0 items=0 ppid=7008 pid=7009 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274186.761:1377): avc:  denied  { write } for  pid=7098 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274186.761:1377): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffedc9aaf40 a2=6e a3=0 items=0 ppid=7072 pid=7098 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274186.761:1378): avc:  denied  { getattr } for  pid=7098 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274186.761:1378): arch=c000003e syscall=4 success=no exit=-13 a0=7ff86e02c000 a1=7ffedc9aadc0 a2=7ffedc9aadc0 a3=0 items=0 ppid=7072 pid=7098 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274186.843:1379): avc:  denied  { write } for  pid=7113 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274186.843:1379): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe3e4345f0 a2=6e a3=0 items=0 ppid=7112 pid=7113 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274192.151:1380): avc:  denied  { write } for  pid=7201 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274192.151:1380): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffd7a983500 a2=6e a3=0 items=0 ppid=7175 pid=7201 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274192.151:1381): avc:  denied  { getattr } for  pid=7201 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274192.151:1381): arch=c000003e syscall=4 success=no exit=-13 a0=7fd144df4000 a1=7ffd7a983380 a2=7ffd7a983380 a3=0 items=0 ppid=7175 pid=7201 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274192.232:1382): avc:  denied  { write } for  pid=7216 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274192.232:1382): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd27bb2250 a2=6e a3=0 items=0 ppid=7215 pid=7216 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274197.537:1383): avc:  denied  { write } for  pid=7304 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274197.537:1383): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffddc5f9430 a2=6e a3=0 items=0 ppid=7278 pid=7304 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274197.538:1384): avc:  denied  { getattr } for  pid=7304 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274197.538:1384): arch=c000003e syscall=4 success=no exit=-13 a0=7f3b1c233000 a1=7ffddc5f92b0 a2=7ffddc5f92b0 a3=0 items=0 ppid=7278 pid=7304 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274197.618:1385): avc:  denied  { write } for  pid=7319 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274197.618:1385): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe949854b0 a2=6e a3=0 items=0 ppid=7318 pid=7319 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274202.928:1386): avc:  denied  { write } for  pid=7407 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274202.928:1386): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fffba260720 a2=6e a3=0 items=0 ppid=7381 pid=7407 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274202.928:1387): avc:  denied  { getattr } for  pid=7407 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274202.928:1387): arch=c000003e syscall=4 success=no exit=-13 a0=7fae70248000 a1=7fffba2605a0 a2=7fffba2605a0 a3=0 items=0 ppid=7381 pid=7407 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274203.008:1388): avc:  denied  { write } for  pid=7422 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274203.008:1388): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd33df09e0 a2=6e a3=0 items=0 ppid=7421 pid=7422 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274208.311:1389): avc:  denied  { write } for  pid=7510 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274208.311:1389): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff24c457f0 a2=6e a3=0 items=0 ppid=7484 pid=7510 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274208.312:1390): avc:  denied  { getattr } for  pid=7510 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274208.312:1390): arch=c000003e syscall=4 success=no exit=-13 a0=7f1f84ecc000 a1=7fff24c45670 a2=7fff24c45670 a3=0 items=0 ppid=7484 pid=7510 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274208.393:1391): avc:  denied  { write } for  pid=7525 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274208.393:1391): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc69bd0740 a2=6e a3=0 items=0 ppid=7524 pid=7525 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274213.695:1392): avc:  denied  { write } for  pid=7613 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274213.695:1392): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff9c774f20 a2=6e a3=0 items=0 ppid=7587 pid=7613 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274213.696:1393): avc:  denied  { getattr } for  pid=7613 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274213.696:1393): arch=c000003e syscall=4 success=no exit=-13 a0=7fe6a23d2000 a1=7fff9c774da0 a2=7fff9c774da0 a3=0 items=0 ppid=7587 pid=7613 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274213.776:1394): avc:  denied  { write } for  pid=7628 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274213.776:1394): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcf89265c0 a2=6e a3=0 items=0 ppid=7627 pid=7628 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274219.079:1395): avc:  denied  { write } for  pid=7717 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274219.079:1395): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fffac3fa460 a2=6e a3=0 items=0 ppid=7691 pid=7717 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274219.079:1396): avc:  denied  { getattr } for  pid=7717 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274219.079:1396): arch=c000003e syscall=4 success=no exit=-13 a0=7f0038e97000 a1=7fffac3fa2e0 a2=7fffac3fa2e0 a3=0 items=0 ppid=7691 pid=7717 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274219.159:1397): avc:  denied  { write } for  pid=7732 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274219.159:1397): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc5640e8e0 a2=6e a3=0 items=0 ppid=7731 pid=7732 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274224.458:1398): avc:  denied  { write } for  pid=7820 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274224.458:1398): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffe7c748f90 a2=6e a3=0 items=0 ppid=7794 pid=7820 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274224.459:1399): avc:  denied  { getattr } for  pid=7820 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274224.459:1399): arch=c000003e syscall=4 success=no exit=-13 a0=7f6224ed1000 a1=7ffe7c748e10 a2=7ffe7c748e10 a3=0 items=0 ppid=7794 pid=7820 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274224.541:1400): avc:  denied  { write } for  pid=7835 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274224.541:1400): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc1148ed70 a2=6e a3=0 items=0 ppid=7834 pid=7835 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274229.840:1401): avc:  denied  { write } for  pid=7923 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274229.840:1401): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffce211d780 a2=6e a3=0 items=0 ppid=7897 pid=7923 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274229.840:1402): avc:  denied  { getattr } for  pid=7923 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274229.840:1402): arch=c000003e syscall=4 success=no exit=-13 a0=7f622b20c000 a1=7ffce211d600 a2=7ffce211d600 a3=0 items=0 ppid=7897 pid=7923 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274229.920:1403): avc:  denied  { write } for  pid=7938 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274229.920:1403): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd56cdebf0 a2=6e a3=0 items=0 ppid=7937 pid=7938 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274235.219:1404): avc:  denied  { write } for  pid=8026 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274235.219:1404): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff59e65f20 a2=6e a3=0 items=0 ppid=8000 pid=8026 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274235.220:1405): avc:  denied  { getattr } for  pid=8026 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274235.220:1405): arch=c000003e syscall=4 success=no exit=-13 a0=7fd733c1b000 a1=7fff59e65da0 a2=7fff59e65da0 a3=0 items=0 ppid=8000 pid=8026 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274235.299:1406): avc:  denied  { write } for  pid=8041 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274235.299:1406): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffee5b62d00 a2=6e a3=0 items=0 ppid=8040 pid=8041 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274240.600:1407): avc:  denied  { write } for  pid=8129 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274240.600:1407): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff33a2c880 a2=6e a3=0 items=0 ppid=8103 pid=8129 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274240.600:1408): avc:  denied  { getattr } for  pid=8129 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274240.600:1408): arch=c000003e syscall=4 success=no exit=-13 a0=7fd4b0b78000 a1=7fff33a2c700 a2=7fff33a2c700 a3=0 items=0 ppid=8103 pid=8129 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274240.680:1409): avc:  denied  { write } for  pid=8144 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274240.680:1409): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffeaaa85dc0 a2=6e a3=0 items=0 ppid=8143 pid=8144 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274245.987:1410): avc:  denied  { write } for  pid=8232 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274245.987:1410): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff386b2610 a2=6e a3=0 items=0 ppid=8206 pid=8232 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274245.987:1411): avc:  denied  { getattr } for  pid=8232 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274245.987:1411): arch=c000003e syscall=4 success=no exit=-13 a0=7f988c05c000 a1=7fff386b2490 a2=7fff386b2490 a3=0 items=0 ppid=8206 pid=8232 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274246.067:1412): avc:  denied  { write } for  pid=8247 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274246.067:1412): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff495973b0 a2=6e a3=0 items=0 ppid=8246 pid=8247 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274251.373:1413): avc:  denied  { write } for  pid=8336 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274251.373:1413): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff1f8375f0 a2=6e a3=0 items=0 ppid=8310 pid=8336 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274251.374:1414): avc:  denied  { getattr } for  pid=8336 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274251.374:1414): arch=c000003e syscall=4 success=no exit=-13 a0=7f3554e04000 a1=7fff1f837470 a2=7fff1f837470 a3=0 items=0 ppid=8310 pid=8336 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274251.453:1415): avc:  denied  { write } for  pid=8351 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274251.453:1415): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff9717e270 a2=6e a3=0 items=0 ppid=8350 pid=8351 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274256.754:1416): avc:  denied  { write } for  pid=8439 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274256.754:1416): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffca075e1b0 a2=6e a3=0 items=0 ppid=8413 pid=8439 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274256.754:1417): avc:  denied  { getattr } for  pid=8439 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274256.754:1417): arch=c000003e syscall=4 success=no exit=-13 a0=7f73c30f0000 a1=7ffca075e030 a2=7ffca075e030 a3=0 items=0 ppid=8413 pid=8439 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274256.834:1418): avc:  denied  { write } for  pid=8454 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274256.834:1418): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd83589a50 a2=6e a3=0 items=0 ppid=8453 pid=8454 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274262.134:1419): avc:  denied  { write } for  pid=8542 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274262.134:1419): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffdf6d24080 a2=6e a3=0 items=0 ppid=8516 pid=8542 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274262.134:1420): avc:  denied  { getattr } for  pid=8542 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274262.134:1420): arch=c000003e syscall=4 success=no exit=-13 a0=7fa785fef000 a1=7ffdf6d23f00 a2=7ffdf6d23f00 a3=0 items=0 ppid=8516 pid=8542 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274262.215:1421): avc:  denied  { write } for  pid=8557 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274262.215:1421): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe771b4540 a2=6e a3=0 items=0 ppid=8556 pid=8557 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274267.518:1422): avc:  denied  { write } for  pid=8645 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274267.518:1422): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff66e62430 a2=6e a3=0 items=0 ppid=8619 pid=8645 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274267.518:1423): avc:  denied  { getattr } for  pid=8645 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274267.518:1423): arch=c000003e syscall=4 success=no exit=-13 a0=7fca088bc000 a1=7fff66e622b0 a2=7fff66e622b0 a3=0 items=0 ppid=8619 pid=8645 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274267.598:1424): avc:  denied  { write } for  pid=8660 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274267.598:1424): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc8ef0c040 a2=6e a3=0 items=0 ppid=8659 pid=8660 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274272.916:1425): avc:  denied  { write } for  pid=8749 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274272.916:1425): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffe1f9a3720 a2=6e a3=0 items=0 ppid=8723 pid=8749 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274272.916:1426): avc:  denied  { getattr } for  pid=8749 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274272.916:1426): arch=c000003e syscall=4 success=no exit=-13 a0=7fd3e13f4000 a1=7ffe1f9a35a0 a2=7ffe1f9a35a0 a3=0 items=0 ppid=8723 pid=8749 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274272.997:1427): avc:  denied  { write } for  pid=8764 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274272.997:1427): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd2c3e71f0 a2=6e a3=0 items=0 ppid=8763 pid=8764 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274278.301:1428): avc:  denied  { write } for  pid=8852 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274278.301:1428): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffca22f3c40 a2=6e a3=0 items=0 ppid=8826 pid=8852 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274278.301:1429): avc:  denied  { getattr } for  pid=8852 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274278.301:1429): arch=c000003e syscall=4 success=no exit=-13 a0=7f92575e9000 a1=7ffca22f3ac0 a2=7ffca22f3ac0 a3=0 items=0 ppid=8826 pid=8852 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274278.381:1430): avc:  denied  { write } for  pid=8867 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274278.381:1430): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdc0cf1bd0 a2=6e a3=0 items=0 ppid=8866 pid=8867 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274283.689:1431): avc:  denied  { write } for  pid=8955 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274283.689:1431): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffe8d8e3db0 a2=6e a3=0 items=0 ppid=8929 pid=8955 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274283.689:1432): avc:  denied  { getattr } for  pid=8955 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274283.689:1432): arch=c000003e syscall=4 success=no exit=-13 a0=7f7423665000 a1=7ffe8d8e3c30 a2=7ffe8d8e3c30 a3=0 items=0 ppid=8929 pid=8955 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274283.772:1433): avc:  denied  { write } for  pid=8970 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274283.772:1433): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff0b904370 a2=6e a3=0 items=0 ppid=8969 pid=8970 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274289.074:1434): avc:  denied  { write } for  pid=9058 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274289.074:1434): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffc68ce6c30 a2=6e a3=0 items=0 ppid=9032 pid=9058 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274289.075:1435): avc:  denied  { getattr } for  pid=9058 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274289.075:1435): arch=c000003e syscall=4 success=no exit=-13 a0=7fbce55e7000 a1=7ffc68ce6ab0 a2=7ffc68ce6ab0 a3=0 items=0 ppid=9032 pid=9058 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274289.154:1436): avc:  denied  { write } for  pid=9073 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274289.154:1436): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcf9688f70 a2=6e a3=0 items=0 ppid=9072 pid=9073 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274294.455:1437): avc:  denied  { write } for  pid=9162 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274294.455:1437): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffc834420b0 a2=6e a3=0 items=0 ppid=9136 pid=9162 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274294.455:1438): avc:  denied  { getattr } for  pid=9162 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274294.455:1438): arch=c000003e syscall=4 success=no exit=-13 a0=7f7d9064a000 a1=7ffc83441f30 a2=7ffc83441f30 a3=0 items=0 ppid=9136 pid=9162 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274294.535:1439): avc:  denied  { write } for  pid=9177 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274294.535:1439): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff817c4620 a2=6e a3=0 items=0 ppid=9176 pid=9177 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274299.848:1440): avc:  denied  { write } for  pid=9265 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274299.848:1440): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffdb4997280 a2=6e a3=0 items=0 ppid=9239 pid=9265 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274299.849:1441): avc:  denied  { getattr } for  pid=9265 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274299.849:1441): arch=c000003e syscall=4 success=no exit=-13 a0=7ffb57472000 a1=7ffdb4997100 a2=7ffdb4997100 a3=0 items=0 ppid=9239 pid=9265 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274299.933:1442): avc:  denied  { write } for  pid=9280 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274299.933:1442): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd5f2e93e0 a2=6e a3=0 items=0 ppid=9279 pid=9280 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274305.247:1443): avc:  denied  { write } for  pid=9368 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274305.247:1443): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffd7f78ebf0 a2=6e a3=0 items=0 ppid=9342 pid=9368 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274305.247:1444): avc:  denied  { getattr } for  pid=9368 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274305.247:1444): arch=c000003e syscall=4 success=no exit=-13 a0=7f2a37a66000 a1=7ffd7f78ea70 a2=7ffd7f78ea70 a3=0 items=0 ppid=9342 pid=9368 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274305.330:1445): avc:  denied  { write } for  pid=9383 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274305.330:1445): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd96cb77b0 a2=6e a3=0 items=0 ppid=9382 pid=9383 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274310.647:1446): avc:  denied  { write } for  pid=9471 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274310.647:1446): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffc29f8f8e0 a2=6e a3=0 items=0 ppid=9445 pid=9471 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274310.647:1447): avc:  denied  { getattr } for  pid=9471 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274310.647:1447): arch=c000003e syscall=4 success=no exit=-13 a0=7f441a641000 a1=7ffc29f8f760 a2=7ffc29f8f760 a3=0 items=0 ppid=9445 pid=9471 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274310.727:1448): avc:  denied  { write } for  pid=9486 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274310.727:1448): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff7dbce980 a2=6e a3=0 items=0 ppid=9485 pid=9486 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274316.030:1449): avc:  denied  { write } for  pid=9574 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274316.030:1449): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffcf876beb0 a2=6e a3=0 items=0 ppid=9548 pid=9574 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274316.031:1450): avc:  denied  { getattr } for  pid=9574 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274316.031:1450): arch=c000003e syscall=4 success=no exit=-13 a0=7fc0b5bde000 a1=7ffcf876bd30 a2=7ffcf876bd30 a3=0 items=0 ppid=9548 pid=9574 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274316.110:1451): avc:  denied  { write } for  pid=9589 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274316.110:1451): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff1ede2640 a2=6e a3=0 items=0 ppid=9588 pid=9589 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274321.410:1452): avc:  denied  { write } for  pid=9677 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274321.410:1452): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7fff368e7220 a2=6e a3=0 items=0 ppid=9651 pid=9677 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274321.411:1453): avc:  denied  { getattr } for  pid=9677 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274321.411:1453): arch=c000003e syscall=4 success=no exit=-13 a0=7f167f4d9000 a1=7fff368e70a0 a2=7fff368e70a0 a3=0 items=0 ppid=9651 pid=9677 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274321.490:1454): avc:  denied  { write } for  pid=9692 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274321.490:1454): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff521e1450 a2=6e a3=0 items=0 ppid=9691 pid=9692 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274326.791:1455): avc:  denied  { write } for  pid=9781 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274326.791:1455): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffd194358f0 a2=6e a3=0 items=0 ppid=9755 pid=9781 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274326.791:1456): avc:  denied  { getattr } for  pid=9781 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274326.791:1456): arch=c000003e syscall=4 success=no exit=-13 a0=7fc5a93ff000 a1=7ffd19435770 a2=7ffd19435770 a3=0 items=0 ppid=9755 pid=9781 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274326.871:1457): avc:  denied  { write } for  pid=9796 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274326.871:1457): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc03e69230 a2=6e a3=0 items=0 ppid=9795 pid=9796 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274332.172:1458): avc:  denied  { write } for  pid=9884 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274332.172:1458): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffecf09ba40 a2=6e a3=0 items=0 ppid=9858 pid=9884 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274332.172:1459): avc:  denied  { getattr } for  pid=9884 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274332.172:1459): arch=c000003e syscall=4 success=no exit=-13 a0=7ff8dd13d000 a1=7ffecf09b8c0 a2=7ffecf09b8c0 a3=0 items=0 ppid=9858 pid=9884 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274332.253:1460): avc:  denied  { write } for  pid=9899 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274332.253:1460): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd00dd03a0 a2=6e a3=0 items=0 ppid=9898 pid=9899 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274337.553:1461): avc:  denied  { write } for  pid=9987 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274337.553:1461): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffd0be8c700 a2=6e a3=0 items=0 ppid=9961 pid=9987 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274337.554:1462): avc:  denied  { getattr } for  pid=9987 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274337.554:1462): arch=c000003e syscall=4 success=no exit=-13 a0=7f268c1d7000 a1=7ffd0be8c580 a2=7ffd0be8c580 a3=0 items=0 ppid=9961 pid=9987 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274337.635:1463): avc:  denied  { write } for  pid=10002 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274337.635:1463): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffc1cf2150 a2=6e a3=0 items=0 ppid=10001 pid=10002 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274342.938:1464): avc:  denied  { write } for  pid=10090 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274342.938:1464): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffe9a160060 a2=6e a3=0 items=0 ppid=10064 pid=10090 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274342.939:1465): avc:  denied  { getattr } for  pid=10090 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274342.939:1465): arch=c000003e syscall=4 success=no exit=-13 a0=7f3446dce000 a1=7ffe9a15fee0 a2=7ffe9a15fee0 a3=0 items=0 ppid=10064 pid=10090 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274343.019:1466): avc:  denied  { write } for  pid=10105 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274343.019:1466): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffce9d457f0 a2=6e a3=0 items=0 ppid=10104 pid=10105 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274348.320:1467): avc:  denied  { write } for  pid=10193 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274348.320:1467): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffe58f9dc60 a2=6e a3=0 items=0 ppid=10167 pid=10193 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274348.321:1468): avc:  denied  { getattr } for  pid=10193 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274348.321:1468): arch=c000003e syscall=4 success=no exit=-13 a0=7fbec468b000 a1=7ffe58f9dae0 a2=7ffe58f9dae0 a3=0 items=0 ppid=10167 pid=10193 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274348.400:1469): avc:  denied  { write } for  pid=10208 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274348.400:1469): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffe2a88670 a2=6e a3=0 items=0 ppid=10207 pid=10208 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274353.702:1470): avc:  denied  { write } for  pid=10296 comm="net" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274353.702:1470): arch=c000003e syscall=42 success=no exit=-13 a0=b a1=7ffed9ca71f0 a2=6e a3=0 items=0 ppid=10270 pid=10296 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274353.703:1471): avc:  denied  { getattr } for  pid=10296 comm="net" path="/var/run/ctdb/ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274353.703:1471): arch=c000003e syscall=4 success=no exit=-13 a0=7f51e19eb000 a1=7ffed9ca7070 a2=7ffed9ca7070 a3=0 items=0 ppid=10270 pid=10296 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="net" exe="/usr/bin/net" subj=unconfined_u:system_r:samba_net_t:s0 key=(null)
>type=AVC msg=audit(1432274353.781:1472): avc:  denied  { write } for  pid=10311 comm="smbd" name="ctdbd.socket" dev=dm-0 ino=137009 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1432274353.781:1472): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffca63ae730 a2=6e a3=0 items=0 ppid=10310 pid=10311 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274359.216:1473): avc:  denied  { search } for  pid=10415 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274359.216:1473): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd54b00550 a2=6e a3=0 items=0 ppid=10414 pid=10415 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274364.619:1474): avc:  denied  { search } for  pid=10518 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274364.619:1474): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd68171460 a2=6e a3=0 items=0 ppid=10517 pid=10518 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274370.001:1475): avc:  denied  { search } for  pid=10622 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274370.001:1475): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd72d47590 a2=6e a3=0 items=0 ppid=10621 pid=10622 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274375.382:1476): avc:  denied  { search } for  pid=10725 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274375.382:1476): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff244f7dc0 a2=6e a3=0 items=0 ppid=10724 pid=10725 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274380.781:1477): avc:  denied  { search } for  pid=10828 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274380.781:1477): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff7ba83a20 a2=6e a3=0 items=0 ppid=10827 pid=10828 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1432274401.376:1478): user pid=11273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432274401.377:1479): user pid=11273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432274401.386:1480): pid=11273 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=196
>type=USER_START msg=audit(1432274401.392:1481): user pid=11273 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432274401.443:1482): user pid=11273 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432274401.443:1483): user pid=11273 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=AVC msg=audit(1432274414.999:1484): avc:  denied  { search } for  pid=11381 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274414.999:1484): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd87cc19e0 a2=6e a3=0 items=0 ppid=11380 pid=11381 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274420.417:1485): avc:  denied  { search } for  pid=11542 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274420.417:1485): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc72d59530 a2=6e a3=0 items=0 ppid=11541 pid=11542 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274425.822:1486): avc:  denied  { search } for  pid=11651 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274425.822:1486): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc3ad397b0 a2=6e a3=0 items=0 ppid=11650 pid=11651 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274431.222:1487): avc:  denied  { search } for  pid=11755 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274431.222:1487): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc9ce91b70 a2=6e a3=0 items=0 ppid=11754 pid=11755 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274436.731:1488): avc:  denied  { search } for  pid=11860 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274436.731:1488): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffeaa1036a0 a2=6e a3=0 items=0 ppid=11859 pid=11860 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274442.165:1489): avc:  denied  { search } for  pid=11964 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274442.165:1489): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc7d742a30 a2=6e a3=0 items=0 ppid=11963 pid=11964 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274447.576:1490): avc:  denied  { search } for  pid=12067 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274447.576:1490): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdb002a3e0 a2=6e a3=0 items=0 ppid=12066 pid=12067 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274452.970:1491): avc:  denied  { search } for  pid=12170 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274452.970:1491): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdedcfc500 a2=6e a3=0 items=0 ppid=12169 pid=12170 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274458.361:1492): avc:  denied  { search } for  pid=12274 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274458.361:1492): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcd2767080 a2=6e a3=0 items=0 ppid=12273 pid=12274 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274463.759:1493): avc:  denied  { search } for  pid=12378 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274463.759:1493): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc9d8b8e30 a2=6e a3=0 items=0 ppid=12377 pid=12378 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274469.146:1494): avc:  denied  { search } for  pid=12481 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274469.146:1494): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc624e9ea0 a2=6e a3=0 items=0 ppid=12480 pid=12481 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274474.533:1495): avc:  denied  { search } for  pid=12586 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274474.533:1495): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc74c9d940 a2=6e a3=0 items=0 ppid=12585 pid=12586 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274479.924:1496): avc:  denied  { search } for  pid=12696 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274479.924:1496): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdcec24c20 a2=6e a3=0 items=0 ppid=12695 pid=12696 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274485.305:1497): avc:  denied  { search } for  pid=12805 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274485.305:1497): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff83651fd0 a2=6e a3=0 items=0 ppid=12804 pid=12805 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274490.687:1498): avc:  denied  { search } for  pid=12914 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274490.687:1498): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffeb7e35230 a2=6e a3=0 items=0 ppid=12913 pid=12914 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274496.070:1499): avc:  denied  { search } for  pid=13017 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274496.070:1499): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe9d64a190 a2=6e a3=0 items=0 ppid=13016 pid=13017 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274501.460:1500): avc:  denied  { search } for  pid=13122 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274501.460:1500): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff1ba75b80 a2=6e a3=0 items=0 ppid=13121 pid=13122 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274506.852:1501): avc:  denied  { search } for  pid=13225 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274506.852:1501): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe1bf6b750 a2=6e a3=0 items=0 ppid=13224 pid=13225 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274512.233:1502): avc:  denied  { search } for  pid=13334 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274512.233:1502): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcb837d7b0 a2=6e a3=0 items=0 ppid=13333 pid=13334 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274517.614:1503): avc:  denied  { search } for  pid=13439 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274517.614:1503): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe91bea4b0 a2=6e a3=0 items=0 ppid=13438 pid=13439 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274523.004:1504): avc:  denied  { search } for  pid=13542 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274523.004:1504): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff84bb47b0 a2=6e a3=0 items=0 ppid=13541 pid=13542 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274528.391:1505): avc:  denied  { search } for  pid=13645 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274528.391:1505): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe473e1df0 a2=6e a3=0 items=0 ppid=13644 pid=13645 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274533.775:1506): avc:  denied  { search } for  pid=13748 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274533.775:1506): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffee4d5be60 a2=6e a3=0 items=0 ppid=13747 pid=13748 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274539.162:1507): avc:  denied  { search } for  pid=13851 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274539.162:1507): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd91388230 a2=6e a3=0 items=0 ppid=13850 pid=13851 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274544.546:1508): avc:  denied  { search } for  pid=13954 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274544.546:1508): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdaf469b90 a2=6e a3=0 items=0 ppid=13953 pid=13954 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274549.931:1509): avc:  denied  { search } for  pid=14058 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274549.931:1509): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc97dfe0b0 a2=6e a3=0 items=0 ppid=14057 pid=14058 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274555.312:1510): avc:  denied  { search } for  pid=14162 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274555.312:1510): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe977b1320 a2=6e a3=0 items=0 ppid=14161 pid=14162 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274560.692:1511): avc:  denied  { search } for  pid=14266 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274560.692:1511): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffb7c05320 a2=6e a3=0 items=0 ppid=14265 pid=14266 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274566.071:1512): avc:  denied  { search } for  pid=14369 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274566.071:1512): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdbd9c4580 a2=6e a3=0 items=0 ppid=14368 pid=14369 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274571.446:1513): avc:  denied  { search } for  pid=14473 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274571.446:1513): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffedbadc040 a2=6e a3=0 items=0 ppid=14472 pid=14473 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274576.831:1514): avc:  denied  { search } for  pid=14576 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274576.831:1514): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffef3dd0b50 a2=6e a3=0 items=0 ppid=14575 pid=14576 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274582.215:1515): avc:  denied  { search } for  pid=14679 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274582.215:1515): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe649436f0 a2=6e a3=0 items=0 ppid=14678 pid=14679 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274587.599:1516): avc:  denied  { search } for  pid=14782 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274587.599:1516): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc08302d20 a2=6e a3=0 items=0 ppid=14781 pid=14782 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274592.984:1517): avc:  denied  { search } for  pid=14886 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274592.984:1517): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffff1dc64b0 a2=6e a3=0 items=0 ppid=14885 pid=14886 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274598.364:1518): avc:  denied  { search } for  pid=14989 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274598.364:1518): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe5441cbd0 a2=6e a3=0 items=0 ppid=14988 pid=14989 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274603.834:1519): avc:  denied  { search } for  pid=15093 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274603.834:1519): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe03f026e0 a2=6e a3=0 items=0 ppid=15092 pid=15093 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274609.195:1520): avc:  denied  { search } for  pid=15197 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274609.195:1520): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffb3084db0 a2=6e a3=0 items=0 ppid=15196 pid=15197 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274614.609:1521): avc:  denied  { search } for  pid=15300 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274614.609:1521): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe9351e370 a2=6e a3=0 items=0 ppid=15299 pid=15300 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274620.009:1522): avc:  denied  { search } for  pid=15403 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274620.009:1522): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcd8cbece0 a2=6e a3=0 items=0 ppid=15402 pid=15403 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274625.412:1523): avc:  denied  { search } for  pid=15507 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274625.412:1523): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffda23617a0 a2=6e a3=0 items=0 ppid=15506 pid=15507 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274630.813:1524): avc:  denied  { search } for  pid=15610 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274630.813:1524): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc2a7f0b20 a2=6e a3=0 items=0 ppid=15609 pid=15610 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274636.191:1525): avc:  denied  { search } for  pid=15713 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274636.191:1525): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe279cc4f0 a2=6e a3=0 items=0 ppid=15712 pid=15713 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274641.571:1526): avc:  denied  { search } for  pid=15816 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274641.571:1526): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc32dc27d0 a2=6e a3=0 items=0 ppid=15815 pid=15816 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274646.958:1527): avc:  denied  { search } for  pid=15920 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274646.958:1527): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff18be68c0 a2=6e a3=0 items=0 ppid=15919 pid=15920 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274652.371:1528): avc:  denied  { search } for  pid=16024 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274652.371:1528): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcad6d3e30 a2=6e a3=0 items=0 ppid=16023 pid=16024 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274657.780:1529): avc:  denied  { search } for  pid=16128 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274657.780:1529): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe22160fa0 a2=6e a3=0 items=0 ppid=16127 pid=16128 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274663.181:1530): avc:  denied  { search } for  pid=16231 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274663.181:1530): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc81225210 a2=6e a3=0 items=0 ppid=16230 pid=16231 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274668.586:1531): avc:  denied  { search } for  pid=16336 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274668.586:1531): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff008b2c30 a2=6e a3=0 items=0 ppid=16335 pid=16336 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274673.908:1532): avc:  denied  { search } for  pid=16440 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274673.908:1532): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd3ec46fd0 a2=6e a3=0 items=0 ppid=16439 pid=16440 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274679.213:1533): avc:  denied  { search } for  pid=16543 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274679.213:1533): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffffa949890 a2=6e a3=0 items=0 ppid=16542 pid=16543 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274684.578:1534): avc:  denied  { search } for  pid=16646 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274684.578:1534): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffea050dc00 a2=6e a3=0 items=0 ppid=16645 pid=16646 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274689.958:1535): avc:  denied  { search } for  pid=16749 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274689.958:1535): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff5457b900 a2=6e a3=0 items=0 ppid=16748 pid=16749 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274695.341:1536): avc:  denied  { search } for  pid=16852 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274695.341:1536): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc10be2d10 a2=6e a3=0 items=0 ppid=16851 pid=16852 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274700.724:1537): avc:  denied  { search } for  pid=16956 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274700.724:1537): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd82c07b10 a2=6e a3=0 items=0 ppid=16955 pid=16956 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274706.128:1538): avc:  denied  { search } for  pid=17059 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274706.128:1538): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdf1ea3cf0 a2=6e a3=0 items=0 ppid=17058 pid=17059 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274711.524:1539): avc:  denied  { search } for  pid=17162 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274711.524:1539): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffce073bfa0 a2=6e a3=0 items=0 ppid=17161 pid=17162 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274716.914:1540): avc:  denied  { search } for  pid=17265 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274716.914:1540): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe6c469230 a2=6e a3=0 items=0 ppid=17264 pid=17265 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274722.311:1541): avc:  denied  { search } for  pid=17368 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274722.311:1541): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc2bff9a40 a2=6e a3=0 items=0 ppid=17367 pid=17368 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274727.692:1542): avc:  denied  { search } for  pid=17471 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274727.692:1542): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffda3fec2d0 a2=6e a3=0 items=0 ppid=17470 pid=17471 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274733.091:1543): avc:  denied  { search } for  pid=17574 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274733.091:1543): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffeb3c934e0 a2=6e a3=0 items=0 ppid=17573 pid=17574 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274738.474:1544): avc:  denied  { search } for  pid=17677 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274738.474:1544): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcace48060 a2=6e a3=0 items=0 ppid=17676 pid=17677 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274743.871:1545): avc:  denied  { search } for  pid=17781 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274743.871:1545): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe1ff27810 a2=6e a3=0 items=0 ppid=17780 pid=17781 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274749.260:1546): avc:  denied  { search } for  pid=17884 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274749.260:1546): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd41577de0 a2=6e a3=0 items=0 ppid=17883 pid=17884 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274754.647:1547): avc:  denied  { search } for  pid=17987 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274754.647:1547): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffee183fb80 a2=6e a3=0 items=0 ppid=17986 pid=17987 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274760.047:1548): avc:  denied  { search } for  pid=18090 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274760.047:1548): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc09dff110 a2=6e a3=0 items=0 ppid=18089 pid=18090 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274765.441:1549): avc:  denied  { search } for  pid=18193 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274765.441:1549): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdbcfff6f0 a2=6e a3=0 items=0 ppid=18192 pid=18193 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274770.858:1550): avc:  denied  { search } for  pid=18297 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274770.858:1550): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe6cce1870 a2=6e a3=0 items=0 ppid=18296 pid=18297 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274776.262:1551): avc:  denied  { search } for  pid=18402 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274776.262:1551): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe25092790 a2=6e a3=0 items=0 ppid=18401 pid=18402 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274781.490:1552): avc:  denied  { search } for  pid=18505 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274781.490:1552): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd5a388a60 a2=6e a3=0 items=0 ppid=18504 pid=18505 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274786.882:1553): avc:  denied  { search } for  pid=18608 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274786.882:1553): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcb30ee5f0 a2=6e a3=0 items=0 ppid=18607 pid=18608 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274792.263:1554): avc:  denied  { search } for  pid=18711 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274792.263:1554): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe153315f0 a2=6e a3=0 items=0 ppid=18710 pid=18711 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274797.679:1555): avc:  denied  { search } for  pid=18816 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274797.679:1555): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff43532f60 a2=6e a3=0 items=0 ppid=18815 pid=18816 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274803.074:1556): avc:  denied  { search } for  pid=18919 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274803.074:1556): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd0d3e7800 a2=6e a3=0 items=0 ppid=18918 pid=18919 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274808.463:1557): avc:  denied  { search } for  pid=19024 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274808.463:1557): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffeeeb448d0 a2=6e a3=0 items=0 ppid=19023 pid=19024 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274813.852:1558): avc:  denied  { search } for  pid=19127 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274813.852:1558): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffcc5538f0 a2=6e a3=0 items=0 ppid=19126 pid=19127 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274819.250:1559): avc:  denied  { search } for  pid=19232 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274819.250:1559): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc9752a1f0 a2=6e a3=0 items=0 ppid=19231 pid=19232 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274824.589:1560): avc:  denied  { search } for  pid=19336 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274824.589:1560): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc2750ef10 a2=6e a3=0 items=0 ppid=19335 pid=19336 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274829.898:1561): avc:  denied  { search } for  pid=19439 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274829.898:1561): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd75d8ab60 a2=6e a3=0 items=0 ppid=19438 pid=19439 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274835.250:1562): avc:  denied  { search } for  pid=19542 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274835.250:1562): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffde801b6a0 a2=6e a3=0 items=0 ppid=19541 pid=19542 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274840.603:1563): avc:  denied  { search } for  pid=19645 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274840.603:1563): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe604ac880 a2=6e a3=0 items=0 ppid=19644 pid=19645 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274845.981:1564): avc:  denied  { search } for  pid=19748 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274845.981:1564): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdc8067500 a2=6e a3=0 items=0 ppid=19747 pid=19748 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274851.367:1565): avc:  denied  { search } for  pid=19852 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274851.367:1565): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd028abfe0 a2=6e a3=0 items=0 ppid=19851 pid=19852 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274856.748:1566): avc:  denied  { search } for  pid=19955 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274856.748:1566): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd37e08f10 a2=6e a3=0 items=0 ppid=19954 pid=19955 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274862.138:1567): avc:  denied  { search } for  pid=20058 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274862.138:1567): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffca8476110 a2=6e a3=0 items=0 ppid=20057 pid=20058 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274867.528:1568): avc:  denied  { search } for  pid=20161 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274867.528:1568): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdee93ed40 a2=6e a3=0 items=0 ppid=20160 pid=20161 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274872.918:1569): avc:  denied  { search } for  pid=20264 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274872.918:1569): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc956ff170 a2=6e a3=0 items=0 ppid=20263 pid=20264 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274878.311:1570): avc:  denied  { search } for  pid=20367 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274878.311:1570): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe4f593a00 a2=6e a3=0 items=0 ppid=20366 pid=20367 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274883.702:1571): avc:  denied  { search } for  pid=20470 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274883.702:1571): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff6e514ef0 a2=6e a3=0 items=0 ppid=20469 pid=20470 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274889.085:1572): avc:  denied  { search } for  pid=20573 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274889.085:1572): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc0725d970 a2=6e a3=0 items=0 ppid=20572 pid=20573 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274894.465:1573): avc:  denied  { search } for  pid=20677 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274894.465:1573): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd12f84440 a2=6e a3=0 items=0 ppid=20676 pid=20677 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274899.844:1574): avc:  denied  { search } for  pid=20780 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274899.844:1574): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffeb9f68490 a2=6e a3=0 items=0 ppid=20779 pid=20780 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274905.227:1575): avc:  denied  { search } for  pid=20883 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274905.227:1575): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffc1975810 a2=6e a3=0 items=0 ppid=20882 pid=20883 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274910.607:1576): avc:  denied  { search } for  pid=20986 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274910.607:1576): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd44b3b420 a2=6e a3=0 items=0 ppid=20985 pid=20986 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274915.988:1577): avc:  denied  { search } for  pid=21089 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274915.988:1577): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdd7600310 a2=6e a3=0 items=0 ppid=21088 pid=21089 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274921.378:1578): avc:  denied  { search } for  pid=21192 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274921.378:1578): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffeb6cc4c90 a2=6e a3=0 items=0 ppid=21191 pid=21192 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274926.757:1579): avc:  denied  { search } for  pid=21296 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274926.757:1579): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe2185bf40 a2=6e a3=0 items=0 ppid=21295 pid=21296 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274932.141:1580): avc:  denied  { search } for  pid=21399 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274932.141:1580): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe0d092110 a2=6e a3=0 items=0 ppid=21398 pid=21399 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274937.522:1581): avc:  denied  { search } for  pid=21502 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274937.522:1581): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffefb8fa5b0 a2=6e a3=0 items=0 ppid=21501 pid=21502 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274942.912:1582): avc:  denied  { search } for  pid=21605 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274942.912:1582): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffc3e83980 a2=6e a3=0 items=0 ppid=21604 pid=21605 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274948.292:1583): avc:  denied  { search } for  pid=21708 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274948.292:1583): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff23fdb7f0 a2=6e a3=0 items=0 ppid=21707 pid=21708 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274953.688:1584): avc:  denied  { search } for  pid=21811 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274953.688:1584): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffec0cf8c40 a2=6e a3=0 items=0 ppid=21810 pid=21811 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274959.077:1585): avc:  denied  { search } for  pid=21914 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274959.077:1585): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff222ca180 a2=6e a3=0 items=0 ppid=21913 pid=21914 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274964.462:1586): avc:  denied  { search } for  pid=22017 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274964.462:1586): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd2779b580 a2=6e a3=0 items=0 ppid=22016 pid=22017 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274969.852:1587): avc:  denied  { search } for  pid=22121 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274969.852:1587): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc2281f540 a2=6e a3=0 items=0 ppid=22120 pid=22121 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274975.242:1588): avc:  denied  { search } for  pid=22224 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274975.242:1588): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe933109c0 a2=6e a3=0 items=0 ppid=22223 pid=22224 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274980.622:1589): avc:  denied  { search } for  pid=22327 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274980.622:1589): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff95e1afe0 a2=6e a3=0 items=0 ppid=22326 pid=22327 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274986.009:1590): avc:  denied  { search } for  pid=22430 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274986.009:1590): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd4a9a2da0 a2=6e a3=0 items=0 ppid=22429 pid=22430 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274991.396:1591): avc:  denied  { search } for  pid=22533 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274991.396:1591): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcfaeff130 a2=6e a3=0 items=0 ppid=22532 pid=22533 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432274996.782:1592): avc:  denied  { search } for  pid=22636 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432274996.782:1592): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffef87d0ff0 a2=6e a3=0 items=0 ppid=22635 pid=22636 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1432275001.507:1593): user pid=22639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1432275001.507:1594): user pid=22639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1432275001.524:1595): pid=22639 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=197
>type=USER_START msg=audit(1432275001.535:1596): user pid=22639 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1432275001.603:1597): user pid=22639 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1432275001.605:1598): user pid=22639 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=AVC msg=audit(1432275002.255:1599): avc:  denied  { search } for  pid=22745 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275002.255:1599): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffddc0f5ea0 a2=6e a3=0 items=0 ppid=22744 pid=22745 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275007.663:1600): avc:  denied  { search } for  pid=22848 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275007.663:1600): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe04e6b0d0 a2=6e a3=0 items=0 ppid=22847 pid=22848 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275013.062:1601): avc:  denied  { search } for  pid=22951 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275013.062:1601): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd0d644460 a2=6e a3=0 items=0 ppid=22950 pid=22951 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275018.447:1602): avc:  denied  { search } for  pid=23054 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275018.447:1602): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe422990c0 a2=6e a3=0 items=0 ppid=23053 pid=23054 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275023.828:1603): avc:  denied  { search } for  pid=23157 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275023.828:1603): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc82d8e670 a2=6e a3=0 items=0 ppid=23156 pid=23157 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275029.210:1604): avc:  denied  { search } for  pid=23260 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275029.210:1604): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe4b512ec0 a2=6e a3=0 items=0 ppid=23259 pid=23260 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275034.592:1605): avc:  denied  { search } for  pid=23363 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275034.592:1605): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffed5084c70 a2=6e a3=0 items=0 ppid=23362 pid=23363 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275039.970:1606): avc:  denied  { search } for  pid=23466 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275039.970:1606): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd15900aa0 a2=6e a3=0 items=0 ppid=23465 pid=23466 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275045.354:1607): avc:  denied  { search } for  pid=23570 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275045.354:1607): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcfa783ce0 a2=6e a3=0 items=0 ppid=23569 pid=23570 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275050.736:1608): avc:  denied  { search } for  pid=23673 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275050.736:1608): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffe2e118330 a2=6e a3=0 items=0 ppid=23672 pid=23673 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275056.119:1609): avc:  denied  { search } for  pid=23776 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275056.119:1609): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc36479fe0 a2=6e a3=0 items=0 ppid=23775 pid=23776 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275061.504:1610): avc:  denied  { search } for  pid=23879 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275061.504:1610): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc0f20f1b0 a2=6e a3=0 items=0 ppid=23878 pid=23879 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275066.885:1611): avc:  denied  { search } for  pid=23982 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275066.885:1611): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffeea9ade70 a2=6e a3=0 items=0 ppid=23981 pid=23982 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275072.268:1612): avc:  denied  { search } for  pid=24085 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275072.268:1612): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd9b61a210 a2=6e a3=0 items=0 ppid=24084 pid=24085 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275077.651:1613): avc:  denied  { search } for  pid=24189 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275077.651:1613): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcb478ea20 a2=6e a3=0 items=0 ppid=24188 pid=24189 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275083.036:1614): avc:  denied  { search } for  pid=24292 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275083.036:1614): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffdfc3211f0 a2=6e a3=0 items=0 ppid=24291 pid=24292 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275088.415:1615): avc:  denied  { search } for  pid=24395 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275088.415:1615): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff88091160 a2=6e a3=0 items=0 ppid=24394 pid=24395 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275093.795:1616): avc:  denied  { search } for  pid=24498 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275093.795:1616): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcbbb0d190 a2=6e a3=0 items=0 ppid=24497 pid=24498 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275099.174:1617): avc:  denied  { search } for  pid=24601 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275099.174:1617): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff63387c60 a2=6e a3=0 items=0 ppid=24600 pid=24601 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275104.568:1618): avc:  denied  { search } for  pid=24704 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275104.568:1618): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffaa485370 a2=6e a3=0 items=0 ppid=24703 pid=24704 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275109.947:1619): avc:  denied  { search } for  pid=24807 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275109.947:1619): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffddc528aa0 a2=6e a3=0 items=0 ppid=24806 pid=24807 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275115.328:1620): avc:  denied  { search } for  pid=24910 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275115.328:1620): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff31831cc0 a2=6e a3=0 items=0 ppid=24909 pid=24910 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275120.712:1621): avc:  denied  { search } for  pid=25014 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275120.712:1621): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffda99e1040 a2=6e a3=0 items=0 ppid=25013 pid=25014 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275126.093:1622): avc:  denied  { search } for  pid=25117 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275126.093:1622): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff4f841a70 a2=6e a3=0 items=0 ppid=25116 pid=25117 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275131.474:1623): avc:  denied  { search } for  pid=25220 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275131.474:1623): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd91903af0 a2=6e a3=0 items=0 ppid=25219 pid=25220 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275136.858:1624): avc:  denied  { search } for  pid=25323 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275136.858:1624): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd149442a0 a2=6e a3=0 items=0 ppid=25322 pid=25323 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275142.240:1625): avc:  denied  { search } for  pid=25426 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275142.240:1625): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd8c997a90 a2=6e a3=0 items=0 ppid=25425 pid=25426 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275147.619:1626): avc:  denied  { search } for  pid=25530 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275147.619:1626): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffca7866f40 a2=6e a3=0 items=0 ppid=25529 pid=25530 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275153.000:1627): avc:  denied  { search } for  pid=25633 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275153.000:1627): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffc46759470 a2=6e a3=0 items=0 ppid=25632 pid=25633 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275158.383:1628): avc:  denied  { search } for  pid=25736 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275158.383:1628): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff7603c810 a2=6e a3=0 items=0 ppid=25735 pid=25736 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275163.763:1629): avc:  denied  { search } for  pid=25839 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275163.763:1629): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd0e1ff130 a2=6e a3=0 items=0 ppid=25838 pid=25839 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275169.149:1630): avc:  denied  { search } for  pid=25942 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275169.149:1630): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd5f5ca330 a2=6e a3=0 items=0 ppid=25941 pid=25942 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275174.530:1631): avc:  denied  { search } for  pid=26045 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275174.530:1631): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd8aec0a40 a2=6e a3=0 items=0 ppid=26044 pid=26045 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275179.913:1632): avc:  denied  { search } for  pid=26148 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275179.913:1632): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcd6150990 a2=6e a3=0 items=0 ppid=26147 pid=26148 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275185.299:1633): avc:  denied  { search } for  pid=26251 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275185.299:1633): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd216398e0 a2=6e a3=0 items=0 ppid=26250 pid=26251 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275190.684:1634): avc:  denied  { search } for  pid=26354 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275190.684:1634): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffff7bf7150 a2=6e a3=0 items=0 ppid=26353 pid=26354 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275196.065:1635): avc:  denied  { search } for  pid=26458 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275196.065:1635): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd857f5590 a2=6e a3=0 items=0 ppid=26457 pid=26458 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275201.445:1636): avc:  denied  { search } for  pid=26561 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275201.445:1636): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fff3b31fd50 a2=6e a3=0 items=0 ppid=26560 pid=26561 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275206.839:1637): avc:  denied  { search } for  pid=26665 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275206.839:1637): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffd2b1bb90 a2=6e a3=0 items=0 ppid=26664 pid=26665 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275212.225:1638): avc:  denied  { search } for  pid=26768 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275212.225:1638): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd91033b60 a2=6e a3=0 items=0 ppid=26767 pid=26768 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275217.609:1639): avc:  denied  { search } for  pid=26871 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275217.609:1639): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffcf16d1eb0 a2=6e a3=0 items=0 ppid=26870 pid=26871 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275222.993:1640): avc:  denied  { search } for  pid=26975 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275222.993:1640): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd7213dc10 a2=6e a3=0 items=0 ppid=26974 pid=26975 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275228.379:1641): avc:  denied  { search } for  pid=27078 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275228.379:1641): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffebe714f00 a2=6e a3=0 items=0 ppid=27077 pid=27078 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1432275233.770:1642): avc:  denied  { search } for  pid=27181 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275233.770:1642): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffffc1f0520 a2=6e a3=0 items=0 ppid=27180 pid=27181 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1432275234.023:1643): user pid=27184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=27184 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432275234.024:1644): user pid=27184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=27184 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432275234.027:1645): user pid=27183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=27184 suid=74 rport=37829 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1432275234.027:1646): user pid=27183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=27184 suid=74 rport=37829 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=AVC msg=audit(1432275239.203:1647): avc:  denied  { search } for  pid=27287 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275239.203:1647): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7ffd9abc4a80 a2=6e a3=0 items=0 ppid=27286 pid=27287 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1432275239.632:1648): user pid=27183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1432275239.633:1649): user pid=27183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=ssh res=failed'
>type=AVC msg=audit(1432275244.612:1650): avc:  denied  { search } for  pid=27390 comm="smbd" name="ctdb" dev=dm-0 ino=132150 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_run_t:s0 tclass=dir
>type=SYSCALL msg=audit(1432275244.612:1650): arch=c000003e syscall=42 success=no exit=-13 a0=d a1=7fffeffaac50 a2=6e a3=0 items=0 ppid=27389 pid=27390 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1432275246.695:1651): user pid=27183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1432275246.699:1652): user pid=27183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1432275246.700:1653): user pid=27183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27184 suid=74 rport=37829 laddr=10.70.34.116 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=USER_AUTH msg=audit(1432275246.701:1654): user pid=27183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1432275246.704:1655): user pid=27183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=LOGIN msg=audit(1432275246.704:1656): pid=27183 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=198
>type=USER_ROLE_CHANGE msg=audit(1432275246.941:1657): user pid=27183 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=USER_START msg=audit(1432275246.947:1658): user pid=27183 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1432275246.949:1659): user pid=27183 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=USER_START msg=audit(1432275246.950:1660): user pid=27183 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1432275246.950:1661): user pid=27394 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=14:58:04:0f:3f:ed:3f:b9:e4:36:e0:dc:60:5c:07:eb direction=? spid=27394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1432275246.951:1662): user pid=27394 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=ac:60:fc:8d:bc:e5:97:6d:a2:49:fd:e6:a9:54:c3:e0 direction=? spid=27394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.70.1.173 terminal=? res=success'
>type=CRED_REFR msg=audit(1432275246.952:1663): user pid=27394 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dhcp-0-173.blr.redhat.com addr=10.70.1.173 terminal=ssh res=success'

Actions: View

Attachments on bug 1221929: 1026645 | 1026677 | 1026709 | 1027682 | 1027683 | 1028708