Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 148169 Details for
Bug 222778
dovecot imap permission failure
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
Audit log
audit.log (text/plain), 3.77 MB, created by
David Highley
on 2007-02-16 03:32:29 UTC
(
hide
)
Description:
Audit log
Filename:
MIME Type:
Creator:
David Highley
Created:
2007-02-16 03:32:29 UTC
Size:
3.77 MB
patch
obsolete
>type=CRED_DISP msg=audit(1171218001.296:57664): user pid=6173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171218001.296:57665): user pid=6173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171218301.619:57666): user pid=6209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171218301.619:57667): login pid=6209 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171218301.622:57668): user pid=6209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171218301.622:57669): user pid=6209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171218357.348:57670): avc: denied { search } for pid=6233 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171218357.348:57670): avc: denied { write } for pid=6233 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171218357.348:57670): avc: denied { add_name } for pid=6233 comm="pyzor" name="DKChrX" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171218357.348:57670): avc: denied { create } for pid=6233 comm="pyzor" name="DKChrX" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171218357.348:57670): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=5015 pid=6233 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171218357.348:57671): avc: denied { getattr } for pid=6233 comm="pyzor" name="DKChrX" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171218357.348:57671): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff14e17160 a2=7fff14e17160 a3=2 items=0 ppid=5015 pid=6233 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171218357.348:57671): path="/tmp/DKChrX" >type=AVC msg=audit(1171218357.348:57672): avc: denied { write } for pid=6233 comm="pyzor" name="DKChrX" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171218357.348:57672): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=5015 pid=6233 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171218357.348:57672): path="/tmp/DKChrX" >type=AVC msg=audit(1171218357.348:57673): avc: denied { remove_name } for pid=6233 comm="pyzor" name="DKChrX" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171218357.348:57673): avc: denied { unlink } for pid=6233 comm="pyzor" name="DKChrX" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171218357.348:57673): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=5015 pid=6233 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171218357.349:57674): avc: denied { read } for pid=6233 comm="pyzor" name="tmpouLNPd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171218357.349:57674): arch=c000003e syscall=0 success=yes exit=367 a0=4 a1=2aaaaf34d000 a2=1000 a3=43 items=0 ppid=5015 pid=6233 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171218357.349:57674): path=2F746D702F746D706F754C4E5064202864656C6574656429 >type=AVC msg=audit(1171218362.309:57675): avc: denied { signal } for pid=5015 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171218362.309:57675): arch=c000003e syscall=62 success=yes exit=0 a0=1859 a1=f a2=54 a3=0 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171218362.433:57676): avc: denied { write } for pid=5015 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171218362.433:57676): arch=c000003e syscall=2 success=yes exit=9 a0=33dae10 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171218462.280:57677): avc: denied { append } for pid=5015 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171218462.280:57677): arch=c000003e syscall=2 success=yes exit=12 a0=32ed920 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171218462.280:57678): avc: denied { ioctl } for pid=5015 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171218462.280:57678): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171218462.280:57678): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171218462.287:57679): avc: denied { append } for pid=5015 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171218462.287:57679): arch=c000003e syscall=2 success=yes exit=9 a0=31afed0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171218462.968:57680): avc: denied { getattr } for pid=6252 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171218462.968:57680): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9ed4fb20 a2=7fff9ed4fb20 a3=6c6280 items=0 ppid=5015 pid=6252 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171218462.968:57680): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171218462.968:57681): avc: denied { read } for pid=6252 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171218462.968:57681): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5015 pid=6252 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171218463.739:57682): avc: denied { link } for pid=5015 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5015" dev=dm-0 ino=15632621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171218463.739:57682): arch=c000003e syscall=86 success=yes exit=0 a0=33cef80 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171218463.740:57683): avc: denied { unlink } for pid=5015 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5015" dev=dm-0 ino=15632621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171218463.740:57683): arch=c000003e syscall=87 success=yes exit=0 a0=33cef80 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171218463.755:57684): avc: denied { write } for pid=6247 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171218463.755:57684): avc: denied { add_name } for pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171218463.755:57684): avc: denied { create } for pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171218463.755:57684): arch=c000003e syscall=2 success=yes exit=6 a0=61d9d0 a1=c1 a2=124 a3=61d9d0 items=0 ppid=6244 pid=6247 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171218463.756:57685): avc: denied { write } for pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171218463.756:57685): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61d9d0 items=0 ppid=6244 pid=6247 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171218463.756:57685): path="/home/dhighley/_nhB.fA2zFB.douglas" >type=AVC msg=audit(1171218463.756:57686): avc: denied { getattr } for pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171218463.756:57686): arch=c000003e syscall=4 success=yes exit=0 a0=61d9d0 a1=7fff8be51850 a2=7fff8be51850 a3=61d9d0 items=0 ppid=6244 pid=6247 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171218463.756:57686): path="/home/dhighley/_nhB.fA2zFB.douglas" >type=AVC msg=audit(1171218463.756:57687): avc: denied { link } for pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171218463.756:57687): arch=c000003e syscall=86 success=yes exit=0 a0=61d9d0 a1=61b510 a2=7fff8be51770 a3=61d9d0 items=0 ppid=6244 pid=6247 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171218463.756:57688): avc: denied { remove_name } for pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171218463.756:57688): avc: denied { unlink } for pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171218463.756:57688): arch=c000003e syscall=87 success=yes exit=0 a0=61d9d0 a1=61b510 a2=7fff8be51770 a3=61d9d0 items=0 ppid=6244 pid=6247 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171218463.757:57689): avc: denied { append } for pid=6247 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171218463.757:57689): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6244 pid=6247 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171218601.956:57690): user pid=6264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171218601.957:57691): login pid=6264 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171218601.958:57692): user pid=6265 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171218601.958:57693): login pid=6265 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171218601.960:57694): user pid=6264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171218601.960:57695): user pid=6264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171218601.968:57696): user pid=6265 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171218601.968:57697): user pid=6265 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171218601.995:57698): user pid=6264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171218601.995:57699): user pid=6264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171218901.293:57700): user pid=6301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171218901.293:57701): login pid=6301 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171218901.296:57702): user pid=6301 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171218901.296:57703): user pid=6301 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171219201.615:57704): user pid=6335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171219201.615:57705): login pid=6335 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171219201.617:57706): user pid=6336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171219201.617:57707): login pid=6336 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171219201.619:57708): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171219201.619:57709): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171219201.628:57710): user pid=6336 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171219201.628:57711): user pid=6336 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171219201.639:57712): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171219201.639:57713): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171219501.962:57714): user pid=6373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171219501.962:57715): login pid=6373 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171219501.965:57716): user pid=6373 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171219501.965:57717): user pid=6373 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171219801.289:57718): user pid=6406 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171219801.289:57719): login pid=6406 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171219801.291:57720): user pid=6405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171219801.291:57721): login pid=6405 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171219801.293:57722): user pid=6405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171219801.293:57723): user pid=6405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171219801.298:57724): user pid=6406 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171219801.298:57725): user pid=6406 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171219801.323:57726): user pid=6405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171219801.324:57727): user pid=6405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171220101.623:57728): user pid=6442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171220101.623:57729): login pid=6442 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171220101.626:57730): user pid=6442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171220101.626:57731): user pid=6442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171220401.955:57732): user pid=6477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171220401.956:57733): login pid=6477 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171220401.957:57734): user pid=6476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171220401.957:57735): login pid=6476 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171220401.962:57736): user pid=6477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171220401.962:57737): user pid=6477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171220401.965:57738): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171220401.965:57739): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171220401.988:57740): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171220401.988:57741): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171220461.282:57742): user pid=6492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171220461.282:57743): login pid=6492 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171220461.286:57744): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171220461.286:57745): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171220462.195:57746): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171220462.196:57747): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171220701.206:57748): user pid=6527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171220701.206:57749): login pid=6527 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171220701.210:57750): user pid=6527 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171220701.211:57751): user pid=6527 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171220710.238:57752): avc: denied { search } for pid=6547 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171220710.238:57752): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5015 pid=6547 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171221001.532:57753): user pid=6576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171221001.532:57754): login pid=6576 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171221001.534:57755): user pid=6577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171221001.535:57756): login pid=6577 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171221001.536:57757): user pid=6576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171221001.536:57758): user pid=6576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171221001.539:57759): user pid=6577 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171221001.539:57760): user pid=6577 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171221001.557:57761): user pid=6576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171221001.558:57762): user pid=6576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171221187.232:57763): user pid=5544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171221187.232:57764): user pid=5544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171221301.238:57765): user pid=6616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171221301.238:57766): login pid=6616 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171221301.242:57767): user pid=6616 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171221301.242:57768): user pid=6616 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171221601.564:57769): user pid=6650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171221601.564:57770): login pid=6650 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171221601.566:57771): user pid=6651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171221601.567:57772): login pid=6651 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171221601.567:57773): user pid=6650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171221601.567:57774): user pid=6650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171221601.579:57775): user pid=6651 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171221601.579:57776): user pid=6651 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171221601.585:57777): user pid=6650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171221601.586:57778): user pid=6650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171221746.993:57779): avc: denied { search } for pid=6684 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171221746.993:57779): avc: denied { write } for pid=6684 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171221746.993:57779): avc: denied { add_name } for pid=6684 comm="pyzor" name="n3wQx_" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171221746.993:57779): avc: denied { create } for pid=6684 comm="pyzor" name="n3wQx_" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171221746.993:57779): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=6684 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171221746.993:57780): avc: denied { getattr } for pid=6684 comm="pyzor" name="n3wQx_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171221746.993:57780): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff650194b0 a2=7fff650194b0 a3=3 items=0 ppid=6550 pid=6684 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171221746.993:57780): path="/tmp/n3wQx_" >type=AVC msg=audit(1171221746.993:57781): avc: denied { write } for pid=6684 comm="pyzor" name="n3wQx_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171221746.993:57781): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=6684 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171221746.993:57781): path="/tmp/n3wQx_" >type=AVC msg=audit(1171221746.993:57782): avc: denied { remove_name } for pid=6684 comm="pyzor" name="n3wQx_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171221746.993:57782): avc: denied { unlink } for pid=6684 comm="pyzor" name="n3wQx_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171221746.993:57782): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=6684 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171221746.994:57783): avc: denied { read } for pid=6684 comm="pyzor" name="tmpW7dRUn" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171221746.994:57783): arch=c000003e syscall=0 success=yes exit=1067 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=6684 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171221746.994:57783): path=2F746D702F746D7057376452556E202864656C6574656429 >type=AVC msg=audit(1171221752.296:57784): avc: denied { write } for pid=6680 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171221752.296:57784): avc: denied { add_name } for pid=6680 comm="procmail" name="_YoB.4z2zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171221752.296:57784): arch=c000003e syscall=2 success=yes exit=6 a0=61b5e0 a1=c1 a2=124 a3=61b5e0 items=0 ppid=6675 pid=6680 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171221752.297:57785): avc: denied { remove_name } for pid=6680 comm="procmail" name="_YoB.4z2zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171221752.297:57785): arch=c000003e syscall=87 success=yes exit=0 a0=61b5e0 a1=61b540 a2=7fff717e7620 a3=61b5e0 items=0 ppid=6675 pid=6680 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171221752.297:57786): avc: denied { append } for pid=6680 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171221752.297:57786): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=3 items=0 ppid=6675 pid=6680 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171221901.899:57787): user pid=6698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171221901.900:57788): login pid=6698 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171221901.903:57789): user pid=6698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171221901.903:57790): user pid=6698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171222201.228:57791): user pid=6734 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171222201.229:57792): login pid=6734 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171222201.230:57793): user pid=6735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171222201.230:57794): login pid=6735 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171222201.232:57795): user pid=6734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171222201.232:57796): user pid=6734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171222201.243:57797): user pid=6735 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171222201.244:57798): user pid=6735 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171222201.252:57799): user pid=6734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171222201.252:57800): user pid=6734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171222501.567:57801): user pid=6769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171222501.567:57802): login pid=6769 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171222501.571:57803): user pid=6769 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171222501.571:57804): user pid=6769 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171222801.898:57805): user pid=6802 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171222801.898:57806): login pid=6802 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171222801.900:57807): user pid=6803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171222801.900:57808): login pid=6803 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171222801.902:57809): user pid=6802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171222801.902:57810): user pid=6802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171222801.904:57811): user pid=6803 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171222801.904:57812): user pid=6803 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171222801.933:57813): user pid=6802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171222801.933:57814): user pid=6802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171222887.873:57815): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1171222887.874:57816): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1171222897.562:57817): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171222897.563:57818): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171222897.572:57819): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171222897.580:57820): login pid=3672 uid=0 old auid=1000 new auid=1000 >type=USER_START msg=audit(1171222897.590:57821): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171222897.590:57822): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=AVC msg=audit(1171222960.643:57823): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171222960.643:57823): arch=c000003e syscall=2 success=yes exit=12 a0=3140270 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171222960.643:57824): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171222960.643:57824): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171222960.643:57824): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171222960.649:57825): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171222960.649:57825): arch=c000003e syscall=2 success=yes exit=9 a0=313c3a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171222961.318:57826): avc: denied { getattr } for pid=7063 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.318:57826): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff8dfe1f80 a2=7fff8dfe1f80 a3=6c6280 items=0 ppid=6550 pid=7063 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171222961.318:57826): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171222961.318:57827): avc: denied { read } for pid=7063 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.318:57827): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7063 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171222961.319:57828): avc: denied { search } for pid=7063 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171222961.319:57828): avc: denied { write } for pid=7063 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171222961.319:57828): avc: denied { add_name } for pid=7063 comm="pyzor" name="kTNeBL" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171222961.319:57828): avc: denied { create } for pid=7063 comm="pyzor" name="kTNeBL" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.319:57828): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=7063 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171222961.319:57829): avc: denied { getattr } for pid=7063 comm="pyzor" name="kTNeBL" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.319:57829): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff8dfe0880 a2=7fff8dfe0880 a3=2 items=0 ppid=6550 pid=7063 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171222961.319:57829): path="/tmp/kTNeBL" >type=AVC msg=audit(1171222961.319:57830): avc: denied { write } for pid=7063 comm="pyzor" name="kTNeBL" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.319:57830): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=6550 pid=7063 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171222961.319:57830): path="/tmp/kTNeBL" >type=AVC msg=audit(1171222961.319:57831): avc: denied { remove_name } for pid=7063 comm="pyzor" name="kTNeBL" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171222961.319:57831): avc: denied { unlink } for pid=7063 comm="pyzor" name="kTNeBL" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.319:57831): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=7063 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171222961.732:57832): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634222 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.732:57832): arch=c000003e syscall=86 success=yes exit=0 a0=30ff520 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171222961.732:57833): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634222 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.732:57833): arch=c000003e syscall=87 success=yes exit=0 a0=30ff520 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171222961.733:57834): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.733:57834): arch=c000003e syscall=2 success=yes exit=9 a0=3034ac0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171222961.777:57835): avc: denied { write } for pid=7052 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171222961.777:57835): avc: denied { add_name } for pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171222961.777:57835): avc: denied { create } for pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.777:57835): arch=c000003e syscall=2 success=yes exit=6 a0=61cb10 a1=c1 a2=124 a3=61cb10 items=0 ppid=7049 pid=7052 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171222961.777:57836): avc: denied { write } for pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.777:57836): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cb10 items=0 ppid=7049 pid=7052 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171222961.777:57836): path="/home/dhighley/_MuB.xG3zFB.douglas" >type=AVC msg=audit(1171222961.778:57837): avc: denied { getattr } for pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.778:57837): arch=c000003e syscall=4 success=yes exit=0 a0=61cb10 a1=7fff900ac000 a2=7fff900ac000 a3=61cb10 items=0 ppid=7049 pid=7052 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171222961.778:57837): path="/home/dhighley/_MuB.xG3zFB.douglas" >type=AVC msg=audit(1171222961.778:57838): avc: denied { link } for pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.778:57838): arch=c000003e syscall=86 success=yes exit=0 a0=61cb10 a1=61b510 a2=7fff900abf20 a3=61cb10 items=0 ppid=7049 pid=7052 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171222961.778:57839): avc: denied { remove_name } for pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171222961.778:57839): avc: denied { unlink } for pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.778:57839): arch=c000003e syscall=87 success=yes exit=0 a0=61cb10 a1=61b510 a2=7fff900abf20 a3=61cb10 items=0 ppid=7049 pid=7052 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171222961.778:57840): avc: denied { append } for pid=7052 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171222961.778:57840): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7049 pid=7052 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1171222996.856:57841): user pid=7071 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171222996.857:57842): user pid=7071 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1171222996.867:57843): user pid=7071 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1171222996.868:57844): user pid=7071 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1171223065.047:57845): user pid=7071 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1171223065.047:57846): user pid=7071 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171223101.240:57847): user pid=7173 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171223101.241:57848): login pid=7173 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171223101.243:57849): user pid=7173 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171223101.244:57850): user pid=7173 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171223401.584:57851): user pid=7224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171223401.585:57852): login pid=7224 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171223401.587:57853): user pid=7225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171223401.588:57854): login pid=7225 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171223401.590:57855): user pid=7224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171223401.590:57856): user pid=7224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171223401.593:57857): user pid=7225 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171223401.594:57858): user pid=7225 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171223401.613:57859): user pid=7224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171223401.613:57860): user pid=7224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171223500.701:57861): avc: denied { search } for pid=7253 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171223500.701:57861): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7253 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171223500.702:57862): avc: denied { search } for pid=7253 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171223500.702:57862): avc: denied { write } for pid=7253 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171223500.702:57862): avc: denied { add_name } for pid=7253 comm="pyzor" name="MXO48S" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171223500.702:57862): avc: denied { create } for pid=7253 comm="pyzor" name="MXO48S" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171223500.702:57862): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=7253 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171223500.703:57863): avc: denied { getattr } for pid=7253 comm="pyzor" name="MXO48S" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171223500.703:57863): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff1dfae850 a2=7fff1dfae850 a3=2 items=0 ppid=6550 pid=7253 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171223500.703:57863): path="/tmp/MXO48S" >type=AVC msg=audit(1171223500.703:57864): avc: denied { write } for pid=7253 comm="pyzor" name="MXO48S" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171223500.703:57864): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=6550 pid=7253 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171223500.703:57864): path="/tmp/MXO48S" >type=AVC msg=audit(1171223500.703:57865): avc: denied { remove_name } for pid=7253 comm="pyzor" name="MXO48S" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171223500.703:57865): avc: denied { unlink } for pid=7253 comm="pyzor" name="MXO48S" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171223500.703:57865): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=7253 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171223500.705:57866): avc: denied { read } for pid=7253 comm="pyzor" name="tmpbFi8Le" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171223500.705:57866): arch=c000003e syscall=0 success=yes exit=1446 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=6550 pid=7253 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171223500.705:57866): path=2F746D702F746D70624669384C65202864656C6574656429 >type=AVC msg=audit(1171223504.274:57867): avc: denied { write } for pid=7249 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171223504.274:57867): avc: denied { add_name } for pid=7249 comm="procmail" name="_RxB.QP3zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171223504.274:57867): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=7246 pid=7249 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171223504.274:57868): avc: denied { remove_name } for pid=7249 comm="procmail" name="_RxB.QP3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171223504.274:57868): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61cff0 a2=7fffa2e44760 a3=61b670 items=0 ppid=7246 pid=7249 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171223504.275:57869): avc: denied { append } for pid=7249 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171223504.275:57869): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7246 pid=7249 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171223701.919:57870): user pid=7274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171223701.920:57871): login pid=7274 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171223701.924:57872): user pid=7274 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171223701.924:57873): user pid=7274 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171224001.272:57874): user pid=7309 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171224001.272:57875): login pid=7309 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171224001.275:57876): user pid=7310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171224001.275:57877): login pid=7310 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171224001.276:57878): user pid=7309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171224001.276:57879): user pid=7309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171224001.277:57880): user pid=7311 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171224001.277:57881): login pid=7311 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171224001.282:57882): user pid=7310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171224001.282:57883): user pid=7310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171224001.289:57884): user pid=7311 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171224001.289:57885): user pid=7311 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171224001.314:57886): user pid=7309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171224001.315:57887): user pid=7309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171224061.611:57888): user pid=7330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171224061.611:57889): login pid=7330 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171224061.614:57890): user pid=7330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171224061.614:57891): user pid=7330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171224062.507:57892): user pid=7330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171224062.507:57893): user pid=7330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171224301.515:57894): user pid=7372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171224301.515:57895): login pid=7372 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171224301.519:57896): user pid=7372 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171224301.520:57897): user pid=7372 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171224309.258:57898): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224309.258:57898): arch=c000003e syscall=2 success=yes exit=12 a0=3273ee0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224309.259:57899): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224309.259:57899): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224309.259:57899): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171224309.272:57900): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171224309.272:57900): arch=c000003e syscall=2 success=yes exit=9 a0=326cb50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224309.874:57901): avc: denied { getattr } for pid=7390 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171224309.874:57901): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffc8f1aec0 a2=7fffc8f1aec0 a3=6c6280 items=0 ppid=6550 pid=7390 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224309.874:57901): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171224309.875:57902): avc: denied { read } for pid=7390 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171224309.875:57902): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7390 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171224314.837:57903): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171224314.837:57903): arch=c000003e syscall=62 success=yes exit=0 a0=1cde a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224314.852:57904): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224314.852:57904): arch=c000003e syscall=86 success=yes exit=0 a0=326cd40 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224314.852:57905): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224314.852:57905): arch=c000003e syscall=87 success=yes exit=0 a0=326cd40 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224314.853:57906): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171224314.853:57906): arch=c000003e syscall=2 success=yes exit=9 a0=309ffc0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224314.863:57907): avc: denied { create } for pid=7386 comm="procmail" name="_azB.6b3zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224314.863:57907): arch=c000003e syscall=2 success=yes exit=6 a0=620550 a1=c1 a2=124 a3=620550 items=0 ppid=7383 pid=7386 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171224314.864:57908): avc: denied { write } for pid=7386 comm="procmail" name="_azB.6b3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224314.864:57908): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=620550 items=0 ppid=7383 pid=7386 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224314.864:57908): path="/home/dhighley/_azB.6b3zFB.douglas" >type=AVC msg=audit(1171224314.864:57909): avc: denied { getattr } for pid=7386 comm="procmail" name="_azB.6b3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224314.864:57909): arch=c000003e syscall=4 success=yes exit=0 a0=620550 a1=7fff4bad44d0 a2=7fff4bad44d0 a3=620550 items=0 ppid=7383 pid=7386 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224314.864:57909): path="/home/dhighley/_azB.6b3zFB.douglas" >type=AVC msg=audit(1171224314.864:57910): avc: denied { link } for pid=7386 comm="procmail" name="_azB.6b3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224314.864:57910): arch=c000003e syscall=86 success=yes exit=0 a0=620550 a1=620530 a2=7fff4bad43f0 a3=620550 items=0 ppid=7383 pid=7386 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171224314.864:57911): avc: denied { unlink } for pid=7386 comm="procmail" name="_azB.6b3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224314.864:57911): arch=c000003e syscall=87 success=yes exit=0 a0=620550 a1=620530 a2=7fff4bad43f0 a3=620550 items=0 ppid=7383 pid=7386 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_END msg=audit(1171224493.462:57912): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171224493.462:57913): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171224601.861:57914): user pid=7479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171224601.861:57915): user pid=7478 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171224601.862:57916): login pid=7478 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171224601.862:57917): login pid=7479 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171224601.866:57918): user pid=7479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171224601.867:57919): user pid=7479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171224601.869:57920): user pid=7478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171224601.870:57921): user pid=7478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171224601.897:57922): user pid=7478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171224601.897:57923): user pid=7478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171224773.684:57924): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224773.684:57924): arch=c000003e syscall=2 success=yes exit=12 a0=31dd8e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224773.685:57925): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224773.685:57925): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224773.685:57925): path="/home/phighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171224774.342:57926): avc: denied { search } for pid=7517 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171224774.342:57926): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171224774.342:57927): avc: denied { getattr } for pid=7517 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224774.342:57927): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff961bd780 a2=7fff961bd780 a3=6c6280 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224774.342:57927): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171224774.342:57928): avc: denied { read } for pid=7517 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224774.342:57928): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171224774.343:57929): avc: denied { search } for pid=7517 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171224774.343:57929): avc: denied { write } for pid=7517 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171224774.343:57929): avc: denied { add_name } for pid=7517 comm="pyzor" name="8GxIR1" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171224774.343:57929): avc: denied { create } for pid=7517 comm="pyzor" name="8GxIR1" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171224774.343:57929): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171224774.343:57930): avc: denied { getattr } for pid=7517 comm="pyzor" name="8GxIR1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171224774.343:57930): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff961bc080 a2=7fff961bc080 a3=2 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224774.343:57930): path="/tmp/8GxIR1" >type=AVC msg=audit(1171224774.343:57931): avc: denied { write } for pid=7517 comm="pyzor" name="8GxIR1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171224774.343:57931): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224774.343:57931): path="/tmp/8GxIR1" >type=AVC msg=audit(1171224774.343:57932): avc: denied { remove_name } for pid=7517 comm="pyzor" name="8GxIR1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171224774.343:57932): avc: denied { unlink } for pid=7517 comm="pyzor" name="8GxIR1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171224774.343:57932): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171224774.346:57933): avc: denied { read } for pid=7517 comm="pyzor" name="tmp-mFXqZ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171224774.346:57933): arch=c000003e syscall=0 success=yes exit=984 a0=4 a1=2aaaaf34d000 a2=1000 a3=13 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224774.346:57933): path=2F746D702F746D702D6D4658715A202864656C6574656429 >type=AVC msg=audit(1171224779.304:57934): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171224779.304:57934): arch=c000003e syscall=62 success=yes exit=0 a0=1d5d a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224779.531:57935): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224779.531:57935): arch=c000003e syscall=86 success=yes exit=0 a0=3049680 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224779.531:57936): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224779.531:57936): arch=c000003e syscall=87 success=yes exit=0 a0=3049680 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224779.546:57937): avc: denied { write } for pid=7513 comm="procmail" name="phighley" dev=dm-0 ino=12485733 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171224779.546:57937): avc: denied { add_name } for pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171224779.546:57937): avc: denied { create } for pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224779.546:57937): arch=c000003e syscall=2 success=yes exit=6 a0=61cc30 a1=c1 a2=124 a3=61cc30 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171224779.546:57938): avc: denied { write } for pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224779.546:57938): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cc30 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224779.546:57938): path="/home/phighley/_Z1B.Lj3zFB.douglas" >type=AVC msg=audit(1171224779.547:57939): avc: denied { getattr } for pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224779.547:57939): arch=c000003e syscall=4 success=yes exit=0 a0=61cc30 a1=7fff1f899280 a2=7fff1f899280 a3=61cc30 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224779.547:57939): path="/home/phighley/_Z1B.Lj3zFB.douglas" >type=AVC msg=audit(1171224779.547:57940): avc: denied { link } for pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224779.547:57940): arch=c000003e syscall=86 success=yes exit=0 a0=61cc30 a1=61b530 a2=7fff1f8991a0 a3=61cc30 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171224779.547:57941): avc: denied { remove_name } for pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171224779.547:57941): avc: denied { unlink } for pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224779.547:57941): arch=c000003e syscall=87 success=yes exit=0 a0=61cc30 a1=61b530 a2=7fff1f8991a0 a3=61cc30 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171224779.547:57942): avc: denied { append } for pid=7513 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224779.547:57942): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171224779.547:57943): avc: denied { lock } for pid=7513 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224779.547:57943): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224779.547:57943): path="/home/phighley/spamlog" >type=USER_ACCT msg=audit(1171224901.199:57944): user pid=7529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171224901.199:57945): login pid=7529 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171224901.203:57946): user pid=7529 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171224901.203:57947): user pid=7529 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171224944.606:57948): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171224944.606:57948): arch=c000003e syscall=2 success=yes exit=9 a0=320b4f0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224945.324:57949): avc: denied { getattr } for pid=7552 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171224945.324:57949): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff7fb04ab0 a2=7fff7fb04ab0 a3=6c6280 items=0 ppid=6550 pid=7552 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224945.324:57949): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171224945.324:57950): avc: denied { read } for pid=7552 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171224945.324:57950): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7552 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171224950.288:57951): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171224950.288:57951): arch=c000003e syscall=62 success=yes exit=0 a0=1d80 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224950.401:57952): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171224950.401:57952): arch=c000003e syscall=2 success=yes exit=9 a0=32913d0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224950.404:57953): avc: denied { ioctl } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224950.404:57953): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171224950.404:57953): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.6550" >type=AVC msg=audit(1171224950.405:57954): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224950.405:57954): arch=c000003e syscall=87 success=yes exit=0 a0=2dff4d0 a1=1cd3ad0 a2=37a0b12b60 a3=3238c30 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171224950.410:57955): avc: denied { link } for pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171224950.410:57955): arch=c000003e syscall=86 success=yes exit=0 a0=30937e0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171225201.534:57956): user pid=7576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171225201.535:57957): login pid=7576 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171225201.537:57958): user pid=7577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171225201.537:57959): login pid=7577 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171225201.539:57960): user pid=7576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171225201.539:57961): user pid=7576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171225201.555:57962): user pid=7577 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171225201.556:57963): user pid=7577 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171225201.559:57964): user pid=7576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171225201.559:57965): user pid=7576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171225501.891:57966): user pid=7614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171225501.892:57967): login pid=7614 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171225501.894:57968): user pid=7614 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171225501.894:57969): user pid=7614 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171225801.223:57970): user pid=7647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171225801.223:57971): login pid=7647 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171225801.225:57972): user pid=7648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171225801.226:57973): login pid=7648 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171225801.226:57974): user pid=7647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171225801.226:57975): user pid=7647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171225801.228:57976): user pid=7648 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171225801.228:57977): user pid=7648 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171225801.248:57978): user pid=7647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171225801.249:57979): user pid=7647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171226101.572:57980): user pid=7682 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171226101.572:57981): login pid=7682 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171226101.576:57982): user pid=7682 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171226101.576:57983): user pid=7682 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171226397.365:57984): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171226397.365:57984): arch=c000003e syscall=2 success=yes exit=12 a0=32a0650 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171226398.637:57985): avc: denied { write } for pid=7723 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171226398.637:57985): avc: denied { add_name } for pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171226398.637:57985): avc: denied { create } for pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171226398.637:57985): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=7718 pid=7723 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171226398.638:57986): avc: denied { write } for pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171226398.638:57986): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=7718 pid=7723 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171226398.638:57986): path="/home/dhighley/_r4B.e83zFB.douglas" >type=AVC msg=audit(1171226398.638:57987): avc: denied { getattr } for pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171226398.638:57987): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff691f4bf0 a2=7fff691f4bf0 a3=61b650 items=0 ppid=7718 pid=7723 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171226398.638:57987): path="/home/dhighley/_r4B.e83zFB.douglas" >type=AVC msg=audit(1171226398.638:57988): avc: denied { link } for pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171226398.638:57988): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61d9e0 a2=7fff691f4b10 a3=61b650 items=0 ppid=7718 pid=7723 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171226398.638:57989): avc: denied { remove_name } for pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171226398.638:57989): avc: denied { unlink } for pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171226398.638:57989): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61d9e0 a2=7fff691f4b10 a3=61b650 items=0 ppid=7718 pid=7723 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171226398.639:57990): avc: denied { append } for pid=7723 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171226398.639:57990): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7718 pid=7723 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171226401.897:57991): user pid=7728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171226401.897:57992): login pid=7728 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171226401.897:57993): user pid=7729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171226401.897:57994): login pid=7729 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171226401.903:57995): user pid=7728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171226401.903:57996): user pid=7728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171226401.904:57997): user pid=7729 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171226401.904:57998): user pid=7729 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171226401.928:57999): user pid=7728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171226401.928:58000): user pid=7728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171226498.094:58001): avc: denied { search } for pid=7756 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171226498.094:58001): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7756 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171226701.231:58002): user pid=7773 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171226701.232:58003): login pid=7773 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171226701.236:58004): user pid=7773 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171226701.236:58005): user pid=7773 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171227001.567:58006): user pid=7807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171227001.567:58007): login pid=7807 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171227001.570:58008): user pid=7808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171227001.570:58009): login pid=7808 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171227001.573:58010): user pid=7807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171227001.573:58011): user pid=7807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171227001.576:58012): user pid=7808 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171227001.576:58013): user pid=7808 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171227001.591:58014): user pid=7807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171227001.591:58015): user pid=7807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171227006.379:58016): avc: denied { search } for pid=7830 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171227006.379:58016): avc: denied { write } for pid=7830 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171227006.379:58016): avc: denied { add_name } for pid=7830 comm="pyzor" name="VGdMuQ" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171227006.379:58016): avc: denied { create } for pid=7830 comm="pyzor" name="VGdMuQ" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171227006.379:58016): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=7830 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171227006.379:58017): avc: denied { getattr } for pid=7830 comm="pyzor" name="VGdMuQ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171227006.379:58017): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff0e076510 a2=7fff0e076510 a3=3 items=0 ppid=6550 pid=7830 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171227006.379:58017): path="/tmp/VGdMuQ" >type=AVC msg=audit(1171227006.379:58018): avc: denied { write } for pid=7830 comm="pyzor" name="VGdMuQ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171227006.379:58018): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15804 items=0 ppid=6550 pid=7830 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171227006.379:58018): path="/tmp/VGdMuQ" >type=AVC msg=audit(1171227006.380:58019): avc: denied { remove_name } for pid=7830 comm="pyzor" name="VGdMuQ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171227006.380:58019): avc: denied { unlink } for pid=7830 comm="pyzor" name="VGdMuQ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171227006.380:58019): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=7830 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171227006.380:58020): avc: denied { read } for pid=7830 comm="pyzor" name="tmpDnGzX6" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171227006.380:58020): arch=c000003e syscall=0 success=yes exit=1132 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=7830 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171227006.380:58020): path=2F746D702F746D70446E477A5836202864656C6574656429 >type=AVC msg=audit(1171227011.472:58021): avc: denied { append } for pid=7826 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171227011.472:58021): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=3 items=0 ppid=7821 pid=7826 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171227301.900:58022): user pid=7856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171227301.900:58023): login pid=7856 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171227301.903:58024): user pid=7856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171227301.903:58025): user pid=7856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171227601.237:58026): user pid=7892 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171227601.238:58027): login pid=7892 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171227601.239:58028): user pid=7893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171227601.239:58029): login pid=7893 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171227601.244:58030): user pid=7892 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171227601.244:58031): user pid=7892 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171227601.250:58032): user pid=7893 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171227601.250:58033): user pid=7893 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171227601.264:58034): user pid=7892 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171227601.264:58035): user pid=7892 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171227661.568:58036): user pid=7908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171227661.569:58037): login pid=7908 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171227661.573:58038): user pid=7908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171227661.573:58039): user pid=7908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171227662.453:58040): user pid=7908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171227662.453:58041): user pid=7908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171227901.461:58042): user pid=7945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171227901.461:58043): login pid=7945 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171227901.465:58044): user pid=7945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171227901.465:58045): user pid=7945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171228201.788:58046): user pid=7980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171228201.788:58047): login pid=7980 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171228201.789:58048): user pid=7979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171228201.789:58049): login pid=7979 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171228201.792:58050): user pid=7979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171228201.792:58051): user pid=7979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171228201.794:58052): user pid=7980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171228201.794:58053): user pid=7980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171228201.811:58054): user pid=7979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171228201.811:58055): user pid=7979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171228472.794:58056): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171228472.794:58056): arch=c000003e syscall=2 success=yes exit=12 a0=32a95d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171228472.794:58057): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171228472.794:58057): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171228472.794:58057): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171228472.800:58058): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171228472.800:58058): arch=c000003e syscall=2 success=yes exit=9 a0=32a20b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171228473.601:58059): avc: denied { getattr } for pid=8027 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171228473.601:58059): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffe7eee7d0 a2=7fffe7eee7d0 a3=6c6280 items=0 ppid=6550 pid=8027 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171228473.601:58059): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171228473.601:58060): avc: denied { read } for pid=8027 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171228473.601:58060): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=8027 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171228478.563:58061): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171228478.563:58061): arch=c000003e syscall=62 success=yes exit=0 a0=1f5b a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171228478.860:58062): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171228478.860:58062): arch=c000003e syscall=86 success=yes exit=0 a0=20e5d10 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171228478.861:58063): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171228478.861:58063): arch=c000003e syscall=87 success=yes exit=0 a0=20e5d10 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171228478.862:58064): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171228478.862:58064): arch=c000003e syscall=2 success=yes exit=9 a0=32d1860 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171228478.955:58065): avc: denied { write } for pid=8023 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171228478.955:58065): avc: denied { add_name } for pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171228478.955:58065): avc: denied { create } for pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171228478.955:58065): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=8018 pid=8023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171228478.956:58066): avc: denied { write } for pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171228478.956:58066): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=8018 pid=8023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171228478.956:58066): path="/home/dhighley/_X9B.-c4zFB.douglas" >type=AVC msg=audit(1171228478.956:58067): avc: denied { getattr } for pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171228478.956:58067): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff53af44f0 a2=7fff53af44f0 a3=61b650 items=0 ppid=8018 pid=8023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171228478.956:58067): path="/home/dhighley/_X9B.-c4zFB.douglas" >type=AVC msg=audit(1171228478.956:58068): avc: denied { link } for pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171228478.956:58068): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61cf20 a2=7fff53af4410 a3=61b650 items=0 ppid=8018 pid=8023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171228478.956:58069): avc: denied { remove_name } for pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171228478.956:58069): avc: denied { unlink } for pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171228478.956:58069): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61cf20 a2=7fff53af4410 a3=61b650 items=0 ppid=8018 pid=8023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171228501.132:58070): user pid=8032 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171228501.132:58071): login pid=8032 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171228501.136:58072): user pid=8032 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171228501.136:58073): user pid=8032 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171228801.471:58074): user pid=8064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171228801.471:58075): login pid=8064 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171228801.473:58076): user pid=8065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171228801.474:58077): login pid=8065 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171228801.475:58078): user pid=8064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171228801.475:58079): user pid=8064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171228801.486:58080): user pid=8065 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171228801.486:58081): user pid=8065 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171228801.498:58082): user pid=8064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171228801.498:58083): user pid=8064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171229101.821:58084): user pid=8101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171229101.821:58085): login pid=8101 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171229101.824:58086): user pid=8101 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171229101.824:58087): user pid=8101 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171229401.147:58088): user pid=8135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171229401.147:58089): login pid=8135 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171229401.149:58090): user pid=8136 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171229401.150:58091): login pid=8136 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171229401.152:58092): user pid=8135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171229401.152:58093): user pid=8135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171229401.161:58094): user pid=8136 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171229401.161:58095): user pid=8136 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171229401.173:58096): user pid=8135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171229401.173:58097): user pid=8135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171229701.495:58098): user pid=8181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171229701.495:58099): login pid=8181 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171229701.499:58100): user pid=8181 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171229701.499:58101): user pid=8181 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171230001.833:58102): user pid=8216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171230001.833:58103): login pid=8216 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171230001.836:58104): user pid=8217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171230001.836:58105): login pid=8217 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171230001.839:58106): user pid=8216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171230001.839:58107): user pid=8216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171230001.841:58108): user pid=8217 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171230001.841:58109): user pid=8217 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171230001.862:58110): user pid=8216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171230001.862:58111): user pid=8216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171230301.182:58112): user pid=8255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171230301.183:58113): login pid=8255 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171230301.186:58114): user pid=8255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171230301.186:58115): user pid=8255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171230601.507:58116): user pid=8289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171230601.507:58117): login pid=8289 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171230601.508:58118): user pid=8290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171230601.508:58119): login pid=8290 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171230601.512:58120): user pid=8289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171230601.513:58121): user pid=8289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171230601.517:58122): user pid=8290 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171230601.518:58123): user pid=8290 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171230601.532:58124): user pid=8289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171230601.532:58125): user pid=8289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171230901.846:58126): user pid=8326 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171230901.846:58127): login pid=8326 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171230901.850:58128): user pid=8326 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171230901.850:58129): user pid=8326 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171231075.686:58130): avc: denied { search } for pid=8360 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171231075.686:58130): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=8360 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171231075.687:58131): avc: denied { create } for pid=8360 comm="pyzor" name="q9xkiq" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171231075.687:58131): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=8360 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171231075.687:58132): avc: denied { getattr } for pid=8360 comm="pyzor" name="q9xkiq" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171231075.687:58132): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff2ed33b50 a2=7fff2ed33b50 a3=3 items=0 ppid=6550 pid=8360 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171231075.687:58132): path="/tmp/q9xkiq" >type=AVC msg=audit(1171231075.687:58133): avc: denied { write } for pid=8360 comm="pyzor" name="q9xkiq" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171231075.687:58133): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=8360 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171231075.687:58133): path="/tmp/q9xkiq" >type=AVC msg=audit(1171231075.687:58134): avc: denied { unlink } for pid=8360 comm="pyzor" name="q9xkiq" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171231075.687:58134): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=8360 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171231075.688:58135): avc: denied { read } for pid=8360 comm="pyzor" name="tmpjvMVDm" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171231075.688:58135): arch=c000003e syscall=0 success=yes exit=2830 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=8360 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171231075.688:58135): path=2F746D702F746D706A764D56446D202864656C6574656429 >type=AVC msg=audit(1171231080.670:58136): avc: denied { append } for pid=8356 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171231080.670:58136): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=8351 pid=8356 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171231201.185:58137): user pid=8372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171231201.185:58138): login pid=8372 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171231201.186:58139): user pid=8373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171231201.186:58140): login pid=8373 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171231201.191:58141): user pid=8372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171231201.191:58142): user pid=8372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171231201.194:58143): user pid=8373 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171231201.194:58144): user pid=8373 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171231201.221:58145): user pid=8372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171231201.221:58146): user pid=8372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171231261.514:58147): user pid=8388 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171231261.514:58148): login pid=8388 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171231261.517:58149): user pid=8388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171231261.517:58150): user pid=8388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171231262.399:58151): user pid=8388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171231262.399:58152): user pid=8388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171231501.408:58153): user pid=8431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171231501.409:58154): login pid=8431 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171231501.412:58155): user pid=8431 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171231501.412:58156): user pid=8431 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171231509.018:58157): avc: denied { search } for pid=8451 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171231509.018:58157): avc: denied { write } for pid=8451 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171231509.018:58157): avc: denied { add_name } for pid=8451 comm="pyzor" name="uFMFof" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171231509.018:58157): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=8451 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171231509.018:58158): avc: denied { remove_name } for pid=8451 comm="pyzor" name="uFMFof" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171231509.018:58158): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=8451 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171231509.270:58159): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171231509.270:58159): arch=c000003e syscall=2 success=yes exit=9 a0=30e0460 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171231509.280:58160): avc: denied { write } for pid=8447 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171231509.280:58160): avc: denied { add_name } for pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171231509.280:58160): avc: denied { create } for pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171231509.280:58160): arch=c000003e syscall=2 success=yes exit=6 a0=61b5e0 a1=c1 a2=124 a3=61b5e0 items=0 ppid=8442 pid=8447 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171231509.280:58161): avc: denied { write } for pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171231509.280:58161): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b5e0 items=0 ppid=8442 pid=8447 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171231509.280:58161): path="/home/dhighley/__DC.VM5zFB.douglas" >type=AVC msg=audit(1171231509.280:58162): avc: denied { getattr } for pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171231509.280:58162): arch=c000003e syscall=4 success=yes exit=0 a0=61b5e0 a1=7fff05555f30 a2=7fff05555f30 a3=61b5e0 items=0 ppid=8442 pid=8447 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171231509.280:58162): path="/home/dhighley/__DC.VM5zFB.douglas" >type=AVC msg=audit(1171231509.281:58163): avc: denied { link } for pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171231509.281:58163): arch=c000003e syscall=86 success=yes exit=0 a0=61b5e0 a1=61b540 a2=7fff05555e50 a3=61b5e0 items=0 ppid=8442 pid=8447 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171231509.281:58164): avc: denied { remove_name } for pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171231509.281:58164): avc: denied { unlink } for pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171231509.281:58164): arch=c000003e syscall=87 success=yes exit=0 a0=61b5e0 a1=61b540 a2=7fff05555e50 a3=61b5e0 items=0 ppid=8442 pid=8447 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171231801.741:58165): user pid=8479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171231801.742:58166): login pid=8479 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171231801.744:58167): user pid=8480 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171231801.744:58168): login pid=8480 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171231801.745:58169): user pid=8479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171231801.746:58170): user pid=8479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171231801.756:58171): user pid=8480 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171231801.756:58172): user pid=8480 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171231801.766:58173): user pid=8479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171231801.766:58174): user pid=8479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171231990.467:58175): user pid=7310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171231990.467:58176): user pid=7310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171232101.473:58177): user pid=8519 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171232101.473:58178): login pid=8519 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171232101.477:58179): user pid=8519 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171232101.478:58180): user pid=8519 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171232401.815:58181): user pid=8552 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171232401.816:58182): login pid=8552 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171232401.818:58183): user pid=8553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171232401.818:58184): login pid=8553 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171232401.822:58185): user pid=8552 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171232401.822:58186): user pid=8552 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171232401.824:58187): user pid=8553 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171232401.824:58188): user pid=8553 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171232401.851:58189): user pid=8552 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171232401.852:58190): user pid=8552 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171232701.156:58191): user pid=8588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171232701.156:58192): login pid=8588 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171232701.161:58193): user pid=8588 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171232701.161:58194): user pid=8588 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171233001.484:58195): user pid=8623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171233001.484:58196): login pid=8623 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171233001.486:58197): user pid=8624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171233001.487:58198): login pid=8624 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171233001.488:58199): user pid=8623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171233001.489:58200): user pid=8623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171233001.499:58201): user pid=8624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171233001.499:58202): user pid=8624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171233001.508:58203): user pid=8623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171233001.509:58204): user pid=8623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171233301.819:58205): user pid=8659 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171233301.819:58206): login pid=8659 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171233301.823:58207): user pid=8659 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171233301.824:58208): user pid=8659 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171233522.479:58209): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171233522.479:58209): arch=c000003e syscall=2 success=yes exit=12 a0=32f4b60 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171233522.479:58210): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171233522.479:58210): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171233522.479:58210): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171233522.485:58211): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171233522.485:58211): arch=c000003e syscall=2 success=yes exit=9 a0=31e5640 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171233523.825:58212): avc: denied { getattr } for pid=8695 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171233523.825:58212): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb169e640 a2=7fffb169e640 a3=6c6280 items=0 ppid=6550 pid=8695 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171233523.825:58212): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171233523.826:58213): avc: denied { read } for pid=8695 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171233523.826:58213): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=8695 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171233528.790:58214): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171233528.790:58214): arch=c000003e syscall=62 success=yes exit=0 a0=21f7 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171233528.911:58215): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171233528.911:58215): arch=c000003e syscall=86 success=yes exit=0 a0=31afd50 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171233528.911:58216): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171233528.911:58216): arch=c000003e syscall=87 success=yes exit=0 a0=31afd50 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171233601.158:58217): user pid=8703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171233601.159:58218): login pid=8703 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171233601.161:58219): user pid=8704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171233601.161:58220): login pid=8704 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171233601.161:58221): user pid=8703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171233601.161:58222): user pid=8703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171233601.175:58223): user pid=8704 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171233601.175:58224): user pid=8704 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171233601.181:58225): user pid=8703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171233601.181:58226): user pid=8703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171233901.495:58227): user pid=8744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171233901.495:58228): login pid=8744 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171233901.499:58229): user pid=8744 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171233901.499:58230): user pid=8744 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171234201.503:58231): avc: denied { search } for pid=8789 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171234201.503:58231): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=8789 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171234201.504:58232): avc: denied { create } for pid=8789 comm="pyzor" name="r_iA-f" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171234201.504:58232): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=8789 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171234201.505:58233): avc: denied { getattr } for pid=8789 comm="pyzor" name="r_iA-f" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171234201.505:58233): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff12a24ec0 a2=7fff12a24ec0 a3=3 items=0 ppid=6550 pid=8789 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171234201.505:58233): path="/tmp/r_iA-f" >type=AVC msg=audit(1171234201.505:58234): avc: denied { write } for pid=8789 comm="pyzor" name="r_iA-f" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171234201.505:58234): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=8789 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171234201.505:58234): path="/tmp/r_iA-f" >type=AVC msg=audit(1171234201.505:58235): avc: denied { unlink } for pid=8789 comm="pyzor" name="r_iA-f" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171234201.505:58235): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=8789 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171234201.505:58236): avc: denied { read } for pid=8789 comm="pyzor" name="tmpQtfhWN" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171234201.505:58236): arch=c000003e syscall=0 success=yes exit=933 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=8789 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171234201.505:58236): path=2F746D702F746D7051746668574E202864656C6574656429 >type=USER_ACCT msg=audit(1171234201.821:58237): user pid=8790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171234201.821:58238): login pid=8790 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171234201.821:58239): user pid=8791 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171234201.822:58240): login pid=8791 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171234201.825:58241): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171234201.825:58242): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171234201.830:58243): user pid=8791 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171234201.830:58244): user pid=8791 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171234201.846:58245): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171234201.846:58246): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171234501.167:58247): user pid=8825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171234501.167:58248): login pid=8825 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171234501.171:58249): user pid=8825 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171234501.171:58250): user pid=8825 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171234801.504:58251): user pid=8860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171234801.504:58252): login pid=8860 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171234801.506:58253): user pid=8861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171234801.506:58254): login pid=8861 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171234801.508:58255): user pid=8860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171234801.508:58256): user pid=8860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171234801.509:58257): user pid=8862 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171234801.509:58258): login pid=8862 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171234801.519:58259): user pid=8861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171234801.519:58260): user pid=8861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171234801.520:58261): user pid=8862 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171234801.521:58262): user pid=8862 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171234801.533:58263): user pid=8860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171234801.534:58264): user pid=8860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171234861.859:58265): user pid=8881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171234861.860:58266): login pid=8881 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171234861.864:58267): user pid=8881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171234861.864:58268): user pid=8881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171234862.746:58269): user pid=8881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171234862.747:58270): user pid=8881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171234877.379:58271): avc: denied { getattr } for pid=8905 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171234877.379:58271): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffffb1b8160 a2=7ffffb1b8160 a3=6c6280 items=0 ppid=6550 pid=8905 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171234877.379:58271): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171234877.379:58272): avc: denied { read } for pid=8905 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171234877.379:58272): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=8905 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171234877.380:58273): avc: denied { search } for pid=8905 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171234877.380:58273): avc: denied { write } for pid=8905 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171234877.380:58273): avc: denied { add_name } for pid=8905 comm="pyzor" name="e3jzKG" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171234877.380:58273): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=8905 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171234877.381:58274): avc: denied { remove_name } for pid=8905 comm="pyzor" name="e3jzKG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171234877.381:58274): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=8905 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171234882.719:58275): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171234882.719:58275): arch=c000003e syscall=2 success=yes exit=9 a0=309fda0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171234916.086:58276): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171234916.086:58276): arch=c000003e syscall=2 success=yes exit=12 a0=334c8f0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171234916.086:58277): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171234916.086:58277): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171234916.086:58277): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171234916.100:58278): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171234916.100:58278): arch=c000003e syscall=2 success=yes exit=9 a0=31d9d10 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171234921.634:58279): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171234921.634:58279): arch=c000003e syscall=86 success=yes exit=0 a0=32a6da0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171234921.634:58280): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171234921.634:58280): arch=c000003e syscall=87 success=yes exit=0 a0=32a6da0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171235101.753:58281): user pid=8937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171235101.754:58282): login pid=8937 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171235101.757:58283): user pid=8937 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171235101.757:58284): user pid=8937 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171235401.097:58285): user pid=8973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171235401.097:58286): login pid=8973 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171235401.100:58287): user pid=8974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171235401.100:58288): login pid=8974 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171235401.101:58289): user pid=8973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171235401.101:58290): user pid=8973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171235401.112:58291): user pid=8974 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171235401.112:58292): user pid=8974 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171235401.120:58293): user pid=8973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171235401.121:58294): user pid=8973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171235574.839:58295): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1171235574.840:58296): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1171235585.087:58297): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171235585.088:58298): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171235585.097:58299): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171235585.104:58300): login pid=3672 uid=0 old auid=1000 new auid=1000 >type=USER_START msg=audit(1171235585.115:58301): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171235585.115:58302): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171235701.452:58303): user pid=9234 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171235701.453:58304): login pid=9234 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171235701.457:58305): user pid=9234 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171235701.457:58306): user pid=9234 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171235724.057:58307): user pid=9279 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171235724.058:58308): user pid=9279 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171235969.873:58309): user pid=9339 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171235969.874:58310): user pid=9339 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=AVC msg=audit(1171235969.885:58311): avc: denied { write } for pid=9340 comm="imap" name="Sent" dev=dm-0 ino=12487190 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171235969.885:58311): arch=c000003e syscall=21 success=yes exit=0 a0=69e1b0 a1=6 a2=19 a3=6b0b98 items=0 ppid=3104 pid=9340 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null) >type=USER_AUTH msg=audit(1171235985.379:58312): user pid=9347 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171235985.379:58313): user pid=9347 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=AVC msg=audit(1171235985.391:58314): avc: denied { lock } for pid=9348 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171235985.391:58314): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffe08dad30 a3=0 items=0 ppid=3104 pid=9348 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null) >type=AVC_PATH msg=audit(1171235985.391:58314): path="/home/dhighley/Mail/Trash" >type=USER_ACCT msg=audit(1171236001.797:58315): user pid=9390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171236001.798:58316): login pid=9390 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171236001.798:58317): user pid=9389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171236001.798:58318): login pid=9389 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171236001.804:58319): user pid=9389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171236001.804:58320): user pid=9389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171236001.805:58321): user pid=9390 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171236001.805:58322): user pid=9390 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171236001.827:58323): user pid=9389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171236001.828:58324): user pid=9389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171236010.099:58325): avc: denied { getattr } for pid=9402 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171236010.099:58325): arch=c000003e syscall=4 success=yes exit=0 a0=8c4490 a1=7fffa000b660 a2=7fffa000b660 a3=3 items=0 ppid=30527 pid=9402 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171236010.099:58325): path="/bin/hostname" >type=AVC msg=audit(1171236010.099:58326): avc: denied { execute } for pid=9402 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171236010.099:58326): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=1 a2=0 a3=3 items=0 ppid=30527 pid=9402 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1171236010.099:58327): avc: denied { read } for pid=9402 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171236010.099:58327): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=4 a2=0 a3=3 items=0 ppid=30527 pid=9402 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1171236010.099:58328): avc: denied { execute_no_trans } for pid=9402 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171236010.099:58328): arch=c000003e syscall=59 success=yes exit=0 a0=8c4490 a1=8c4bc0 a2=8c4750 a3=8 items=0 ppid=30527 pid=9402 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="hostname" exe="/bin/hostname" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171236010.099:58328): path="/bin/hostname" >type=USER_ACCT msg=audit(1171236301.142:58329): user pid=9436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171236301.143:58330): login pid=9436 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171236301.146:58331): user pid=9436 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171236301.146:58332): user pid=9436 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171236601.495:58333): user pid=9473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171236601.495:58334): login pid=9473 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171236601.498:58335): user pid=9474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171236601.498:58336): login pid=9474 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171236601.499:58337): user pid=9473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171236601.499:58338): user pid=9473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171236601.510:58339): user pid=9474 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171236601.510:58340): user pid=9474 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171236601.518:58341): user pid=9473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171236601.518:58342): user pid=9473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171236901.835:58343): user pid=9517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171236901.835:58344): login pid=9517 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171236901.840:58345): user pid=9517 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171236901.840:58346): user pid=9517 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171237201.185:58347): user pid=9550 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171237201.185:58348): login pid=9550 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171237201.187:58349): user pid=9551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171237201.187:58350): login pid=9551 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171237201.189:58351): user pid=9550 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171237201.189:58352): user pid=9550 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171237201.198:58353): user pid=9551 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171237201.198:58354): user pid=9551 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171237201.209:58355): user pid=9550 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171237201.209:58356): user pid=9550 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171237501.539:58357): user pid=9587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171237501.539:58358): login pid=9587 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171237501.542:58359): user pid=9587 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171237501.542:58360): user pid=9587 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171237801.887:58361): user pid=9623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171237801.887:58362): login pid=9623 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171237801.889:58363): user pid=9624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171237801.889:58364): login pid=9624 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171237801.891:58365): user pid=9623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171237801.891:58366): user pid=9623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171237801.893:58367): user pid=9624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171237801.893:58368): user pid=9624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171237801.922:58369): user pid=9623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171237801.922:58370): user pid=9623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171238101.229:58371): user pid=9660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171238101.229:58372): login pid=9660 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171238101.233:58373): user pid=9660 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171238101.234:58374): user pid=9660 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171238401.553:58375): user pid=9698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171238401.553:58376): login pid=9698 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171238401.556:58377): user pid=9699 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171238401.556:58378): login pid=9699 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171238401.559:58379): user pid=9698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171238401.559:58380): user pid=9698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171238401.561:58381): user pid=9699 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171238401.561:58382): user pid=9699 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171238401.580:58383): user pid=9698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171238401.580:58384): user pid=9698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171238461.896:58385): user pid=9714 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171238461.896:58386): login pid=9714 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171238461.900:58387): user pid=9714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171238461.900:58388): user pid=9714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171238462.823:58389): user pid=9714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171238462.824:58390): user pid=9714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171238607.410:58391): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171238607.410:58391): arch=c000003e syscall=2 success=yes exit=12 a0=32f2730 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171238607.411:58392): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171238607.411:58392): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171238607.411:58392): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171238607.415:58393): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171238607.415:58393): arch=c000003e syscall=2 success=yes exit=9 a0=30fdb40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171238608.071:58394): avc: denied { search } for pid=9748 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171238608.071:58394): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171238608.071:58395): avc: denied { getattr } for pid=9748 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171238608.071:58395): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9a4b7460 a2=7fff9a4b7460 a3=6c6280 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171238608.071:58395): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171238608.071:58396): avc: denied { read } for pid=9748 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171238608.071:58396): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171238608.072:58397): avc: denied { search } for pid=9748 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171238608.072:58397): avc: denied { write } for pid=9748 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171238608.072:58397): avc: denied { add_name } for pid=9748 comm="pyzor" name="p1gBmZ" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171238608.072:58397): avc: denied { create } for pid=9748 comm="pyzor" name="p1gBmZ" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171238608.072:58397): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171238608.072:58398): avc: denied { getattr } for pid=9748 comm="pyzor" name="p1gBmZ" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171238608.072:58398): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff9a4b5d60 a2=7fff9a4b5d60 a3=2 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171238608.072:58398): path="/tmp/p1gBmZ" >type=AVC msg=audit(1171238608.072:58399): avc: denied { write } for pid=9748 comm="pyzor" name="p1gBmZ" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171238608.072:58399): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171238608.072:58399): path="/tmp/p1gBmZ" >type=AVC msg=audit(1171238608.073:58400): avc: denied { remove_name } for pid=9748 comm="pyzor" name="p1gBmZ" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171238608.073:58400): avc: denied { unlink } for pid=9748 comm="pyzor" name="p1gBmZ" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171238608.073:58400): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171238608.073:58401): avc: denied { read } for pid=9748 comm="pyzor" name="tmpdzxjQJ" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171238608.073:58401): arch=c000003e syscall=0 success=yes exit=116 a0=4 a1=6db010 a2=2000 a3=3 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171238608.073:58401): path=2F746D702F746D70647A786A514A202864656C6574656429 >type=AVC msg=audit(1171238613.035:58402): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171238613.035:58402): arch=c000003e syscall=62 success=yes exit=0 a0=2614 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171238613.162:58403): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634215 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171238613.162:58403): arch=c000003e syscall=86 success=yes exit=0 a0=3039310 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171238613.163:58404): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634215 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171238613.163:58404): arch=c000003e syscall=87 success=yes exit=0 a0=3039310 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171238613.164:58405): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171238613.164:58405): arch=c000003e syscall=2 success=yes exit=9 a0=328f860 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171238613.177:58406): avc: denied { write } for pid=9744 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171238613.177:58406): avc: denied { add_name } for pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171238613.177:58406): avc: denied { create } for pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171238613.177:58406): arch=c000003e syscall=2 success=yes exit=6 a0=61b610 a1=c1 a2=124 a3=61b610 items=0 ppid=9741 pid=9744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171238613.177:58407): avc: denied { write } for pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171238613.177:58407): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b610 items=0 ppid=9741 pid=9744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171238613.177:58407): path="/home/dhighley/_QYC.V76zFB.douglas" >type=AVC msg=audit(1171238613.178:58408): avc: denied { getattr } for pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171238613.178:58408): arch=c000003e syscall=4 success=yes exit=0 a0=61b610 a1=7ffff465e060 a2=7ffff465e060 a3=61b610 items=0 ppid=9741 pid=9744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171238613.178:58408): path="/home/dhighley/_QYC.V76zFB.douglas" >type=AVC msg=audit(1171238613.178:58409): avc: denied { link } for pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171238613.178:58409): arch=c000003e syscall=86 success=yes exit=0 a0=61b610 a1=61c5d0 a2=7ffff465df80 a3=61b610 items=0 ppid=9741 pid=9744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171238613.178:58410): avc: denied { remove_name } for pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171238613.178:58410): avc: denied { unlink } for pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171238613.178:58410): arch=c000003e syscall=87 success=yes exit=0 a0=61b610 a1=61c5d0 a2=7ffff465df80 a3=61b610 items=0 ppid=9741 pid=9744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171238613.178:58411): avc: denied { append } for pid=9744 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171238613.178:58411): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=9741 pid=9744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171238701.831:58412): user pid=9759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171238701.832:58413): login pid=9759 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171238701.837:58414): user pid=9759 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171238701.837:58415): user pid=9759 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171239001.163:58416): user pid=9796 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171239001.163:58417): login pid=9796 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171239001.166:58418): user pid=9797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171239001.166:58419): login pid=9797 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171239001.166:58420): user pid=9796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171239001.166:58421): user pid=9796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171239001.176:58422): user pid=9797 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171239001.176:58423): user pid=9797 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171239001.185:58424): user pid=9796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171239001.185:58425): user pid=9796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171239301.520:58426): user pid=9834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171239301.521:58427): login pid=9834 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171239301.525:58428): user pid=9834 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171239301.525:58429): user pid=9834 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171239532.593:58430): avc: denied { search } for pid=9869 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171239532.593:58430): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=9869 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171239532.594:58431): avc: denied { create } for pid=9869 comm="pyzor" name="9Y8shj" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171239532.594:58431): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=9869 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171239532.594:58432): avc: denied { getattr } for pid=9869 comm="pyzor" name="9Y8shj" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171239532.594:58432): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff7245fd10 a2=7fff7245fd10 a3=2 items=0 ppid=6550 pid=9869 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171239532.594:58432): path="/tmp/9Y8shj" >type=AVC msg=audit(1171239532.594:58433): avc: denied { write } for pid=9869 comm="pyzor" name="9Y8shj" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171239532.594:58433): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=6550 pid=9869 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171239532.594:58433): path="/tmp/9Y8shj" >type=AVC msg=audit(1171239532.595:58434): avc: denied { unlink } for pid=9869 comm="pyzor" name="9Y8shj" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171239532.595:58434): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=9869 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171239532.596:58435): avc: denied { read } for pid=9869 comm="pyzor" name="tmpcmoiaF" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171239532.596:58435): arch=c000003e syscall=0 success=yes exit=2407 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=6550 pid=9869 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171239532.596:58435): path=2F746D702F746D70636D6F696146202864656C6574656429 >type=AVC msg=audit(1171239534.980:58436): avc: denied { append } for pid=9865 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171239534.980:58436): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=9862 pid=9865 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171239601.875:58437): user pid=9876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171239601.875:58438): login pid=9876 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171239601.876:58439): user pid=9877 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171239601.877:58440): login pid=9877 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171239601.879:58441): user pid=9876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171239601.879:58442): user pid=9876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171239601.889:58443): user pid=9877 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171239601.889:58444): user pid=9877 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171239601.906:58445): user pid=9876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171239601.906:58446): user pid=9876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171239901.242:58447): user pid=9911 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171239901.243:58448): login pid=9911 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171239901.246:58449): user pid=9911 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171239901.246:58450): user pid=9911 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171240201.571:58451): user pid=9946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171240201.571:58452): login pid=9946 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171240201.573:58453): user pid=9947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171240201.573:58454): login pid=9947 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171240201.575:58455): user pid=9946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171240201.575:58456): user pid=9946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171240201.585:58457): user pid=9947 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171240201.585:58458): user pid=9947 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171240201.597:58459): user pid=9946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171240201.597:58460): user pid=9946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171240501.923:58461): user pid=9983 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171240501.923:58462): login pid=9983 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171240501.927:58463): user pid=9983 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171240501.927:58464): user pid=9983 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171240801.255:58465): user pid=10017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171240801.256:58466): login pid=10017 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171240801.258:58467): user pid=10018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171240801.258:58468): login pid=10018 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171240801.260:58469): user pid=10017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171240801.260:58470): user pid=10017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171240801.269:58471): user pid=10018 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171240801.269:58472): user pid=10018 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171240801.280:58473): user pid=10017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171240801.281:58474): user pid=10017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171241101.603:58475): user pid=10080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171241101.603:58476): login pid=10080 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171241101.607:58477): user pid=10080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171241101.607:58478): user pid=10080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171241401.932:58479): user pid=10116 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171241401.933:58480): login pid=10116 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171241401.934:58481): user pid=10115 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171241401.934:58482): login pid=10115 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171241401.937:58483): user pid=10115 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171241401.937:58484): user pid=10115 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171241401.940:58485): user pid=10116 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171241401.940:58486): user pid=10116 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171241401.960:58487): user pid=10115 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171241401.960:58488): user pid=10115 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171241507.633:58489): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171241507.633:58489): arch=c000003e syscall=2 success=yes exit=12 a0=325dbc0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171241507.633:58490): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171241507.633:58490): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171241507.633:58490): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171241507.644:58491): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171241507.644:58491): arch=c000003e syscall=2 success=yes exit=9 a0=3073c60 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171241508.152:58492): avc: denied { getattr } for pid=10147 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171241508.152:58492): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffe93c4370 a2=7fffe93c4370 a3=6c6280 items=0 ppid=6550 pid=10147 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171241508.152:58492): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171241508.152:58493): avc: denied { read } for pid=10147 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171241508.152:58493): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=10147 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171241508.153:58494): avc: denied { search } for pid=10147 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171241508.153:58494): avc: denied { write } for pid=10147 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171241508.153:58494): avc: denied { add_name } for pid=10147 comm="pyzor" name="acg5AT" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171241508.153:58494): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=10147 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171241508.153:58495): avc: denied { remove_name } for pid=10147 comm="pyzor" name="acg5AT" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171241508.153:58495): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=10147 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171241513.115:58496): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171241513.115:58496): arch=c000003e syscall=62 success=yes exit=0 a0=27a3 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171241513.224:58497): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171241513.224:58497): arch=c000003e syscall=86 success=yes exit=0 a0=3049680 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171241513.224:58498): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171241513.224:58498): arch=c000003e syscall=87 success=yes exit=0 a0=3049680 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171241513.225:58499): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171241513.225:58499): arch=c000003e syscall=2 success=yes exit=9 a0=31d74b0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171241701.280:58500): user pid=10164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171241701.280:58501): login pid=10164 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171241701.285:58502): user pid=10164 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171241701.285:58503): user pid=10164 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171242001.612:58504): user pid=10204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171242001.612:58505): login pid=10204 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171242001.614:58506): user pid=10205 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171242001.614:58507): login pid=10205 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171242001.616:58508): user pid=10204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171242001.616:58509): user pid=10204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171242001.627:58510): user pid=10205 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171242001.627:58511): user pid=10205 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171242001.635:58512): user pid=10204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171242001.635:58513): user pid=10204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171242061.953:58514): user pid=10219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171242061.953:58515): login pid=10219 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171242061.957:58516): user pid=10219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171242061.957:58517): user pid=10219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171242062.875:58518): user pid=10219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171242062.876:58519): user pid=10219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171242301.882:58520): user pid=10255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171242301.882:58521): login pid=10255 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171242301.885:58522): user pid=10255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171242301.885:58523): user pid=10255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171242311.347:58524): avc: denied { search } for pid=10273 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171242311.347:58524): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=10273 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171242311.348:58525): avc: denied { search } for pid=10273 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171242311.348:58525): avc: denied { write } for pid=10273 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171242311.348:58525): avc: denied { add_name } for pid=10273 comm="pyzor" name="_3mr8E" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171242311.348:58525): avc: denied { create } for pid=10273 comm="pyzor" name="_3mr8E" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171242311.348:58525): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=10273 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171242311.348:58526): avc: denied { getattr } for pid=10273 comm="pyzor" name="_3mr8E" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171242311.348:58526): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff6c5a2e50 a2=7fff6c5a2e50 a3=2 items=0 ppid=6550 pid=10273 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171242311.348:58526): path="/tmp/_3mr8E" >type=AVC msg=audit(1171242311.348:58527): avc: denied { write } for pid=10273 comm="pyzor" name="_3mr8E" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171242311.348:58527): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=6550 pid=10273 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171242311.348:58527): path="/tmp/_3mr8E" >type=AVC msg=audit(1171242311.348:58528): avc: denied { remove_name } for pid=10273 comm="pyzor" name="_3mr8E" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171242311.348:58528): avc: denied { unlink } for pid=10273 comm="pyzor" name="_3mr8E" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171242311.348:58528): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=10273 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171242311.355:58529): avc: denied { read } for pid=10273 comm="pyzor" name="tmptvo4_L" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171242311.355:58529): arch=c000003e syscall=0 success=yes exit=2096 a0=4 a1=2aaaaf34d000 a2=1000 a3=1d9 items=0 ppid=6550 pid=10273 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171242311.355:58529): path=2F746D702F746D7074766F345F4C202864656C6574656429 >type=USER_ACCT msg=audit(1171242601.223:58530): user pid=10298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171242601.224:58531): login pid=10298 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171242601.227:58532): user pid=10299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171242601.227:58533): login pid=10299 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171242601.230:58534): user pid=10298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171242601.230:58535): user pid=10298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171242601.233:58536): user pid=10299 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171242601.233:58537): user pid=10299 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171242601.252:58538): user pid=10298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171242601.252:58539): user pid=10298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171242787.586:58540): user pid=8861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171242787.586:58541): user pid=8861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171242901.592:58542): user pid=10334 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171242901.592:58543): login pid=10334 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171242901.596:58544): user pid=10334 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171242901.596:58545): user pid=10334 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171242931.508:58546): avc: denied { write } for pid=10349 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171242931.508:58546): avc: denied { add_name } for pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171242931.508:58546): avc: denied { create } for pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171242931.508:58546): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=10346 pid=10349 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171242931.509:58547): avc: denied { write } for pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171242931.509:58547): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=10346 pid=10349 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171242931.509:58547): path="/home/dhighley/_thC.z-7zFB.douglas" >type=AVC msg=audit(1171242931.509:58548): avc: denied { getattr } for pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171242931.509:58548): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fffa93ebde0 a2=7fffa93ebde0 a3=61b650 items=0 ppid=10346 pid=10349 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171242931.509:58548): path="/home/dhighley/_thC.z-7zFB.douglas" >type=AVC msg=audit(1171242931.509:58549): avc: denied { link } for pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171242931.509:58549): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61db30 a2=7fffa93ebd00 a3=61b650 items=0 ppid=10346 pid=10349 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171242931.509:58550): avc: denied { remove_name } for pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171242931.509:58550): avc: denied { unlink } for pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171242931.509:58550): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61db30 a2=7fffa93ebd00 a3=61b650 items=0 ppid=10346 pid=10349 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171243201.922:58551): user pid=10375 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171243201.922:58552): login pid=10375 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171243201.924:58553): user pid=10376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171243201.924:58554): login pid=10376 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171243201.925:58555): user pid=10375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171243201.925:58556): user pid=10375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171243201.934:58557): user pid=10376 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171243201.934:58558): user pid=10376 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171243201.944:58559): user pid=10375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171243201.944:58560): user pid=10375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171243501.257:58561): user pid=10411 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171243501.257:58562): login pid=10411 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171243501.261:58563): user pid=10411 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171243501.261:58564): user pid=10411 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171243660.981:58565): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171243660.981:58565): arch=c000003e syscall=2 success=yes exit=12 a0=32204d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171243660.981:58566): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171243660.981:58566): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171243660.981:58566): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171243660.987:58567): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171243660.987:58567): arch=c000003e syscall=2 success=yes exit=9 a0=308f7e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171243661.529:58568): avc: denied { getattr } for pid=10440 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171243661.529:58568): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff97593540 a2=7fff97593540 a3=6c6280 items=0 ppid=6550 pid=10440 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171243661.529:58568): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171243661.529:58569): avc: denied { read } for pid=10440 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171243661.529:58569): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=10440 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171243661.749:58570): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171243661.749:58570): arch=c000003e syscall=86 success=yes exit=0 a0=306e080 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171243661.749:58571): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171243661.749:58571): arch=c000003e syscall=87 success=yes exit=0 a0=306e080 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171243661.750:58572): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171243661.750:58572): arch=c000003e syscall=2 success=yes exit=9 a0=3061a70 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171243801.591:58573): user pid=10454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171243801.591:58574): login pid=10454 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171243801.592:58575): user pid=10455 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171243801.592:58576): login pid=10455 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171243801.597:58577): user pid=10454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171243801.597:58578): user pid=10454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171243801.598:58579): user pid=10455 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171243801.598:58580): user pid=10455 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171243801.618:58581): user pid=10454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171243801.619:58582): user pid=10454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171244101.944:58583): user pid=10489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171244101.944:58584): login pid=10489 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171244101.948:58585): user pid=10489 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171244101.948:58586): user pid=10489 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171244401.276:58587): user pid=10524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171244401.277:58588): login pid=10524 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171244401.277:58589): user pid=10523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171244401.277:58590): login pid=10523 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171244401.282:58591): user pid=10524 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171244401.282:58592): user pid=10524 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171244401.286:58593): user pid=10523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171244401.286:58594): user pid=10523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171244401.310:58595): user pid=10523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171244401.310:58596): user pid=10523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171244522.464:58597): avc: denied { setattr } for pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634215 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171244522.464:58597): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171244522.465:58598): avc: denied { rename } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171244522.465:58598): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171244530.115:58599): avc: denied { create } for pid=10548 comm="procmail" name="_0kC.yX8zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171244530.115:58599): arch=c000003e syscall=2 success=yes exit=6 a0=61fd10 a1=c1 a2=124 a3=61fd10 items=0 ppid=10545 pid=10548 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171244530.116:58600): avc: denied { write } for pid=10548 comm="procmail" name="_0kC.yX8zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171244530.116:58600): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61fd10 items=0 ppid=10545 pid=10548 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171244530.116:58600): path="/home/dhighley/_0kC.yX8zFB.douglas" >type=AVC msg=audit(1171244530.116:58601): avc: denied { getattr } for pid=10548 comm="procmail" name="_0kC.yX8zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171244530.116:58601): arch=c000003e syscall=4 success=yes exit=0 a0=61fd10 a1=7fff22c8a680 a2=7fff22c8a680 a3=61fd10 items=0 ppid=10545 pid=10548 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171244530.116:58601): path="/home/dhighley/_0kC.yX8zFB.douglas" >type=AVC msg=audit(1171244530.116:58602): avc: denied { link } for pid=10548 comm="procmail" name="_0kC.yX8zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171244530.116:58602): arch=c000003e syscall=86 success=yes exit=0 a0=61fd10 a1=61b510 a2=7fff22c8a5a0 a3=61fd10 items=0 ppid=10545 pid=10548 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171244530.117:58603): avc: denied { unlink } for pid=10548 comm="procmail" name="_0kC.yX8zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171244530.117:58603): arch=c000003e syscall=87 success=yes exit=0 a0=61fd10 a1=61b510 a2=7fff22c8a5a0 a3=61fd10 items=0 ppid=10545 pid=10548 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171244701.619:58604): user pid=10568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171244701.619:58605): login pid=10568 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171244701.622:58606): user pid=10568 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171244701.622:58607): user pid=10568 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171245001.945:58608): user pid=10600 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171245001.945:58609): login pid=10600 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171245001.946:58610): user pid=10601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171245001.946:58611): login pid=10601 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171245001.950:58612): user pid=10600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171245001.950:58613): user pid=10600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171245001.951:58614): user pid=10601 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171245001.951:58615): user pid=10601 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171245001.974:58616): user pid=10600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171245001.974:58617): user pid=10600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171245301.297:58618): user pid=10636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171245301.297:58619): login pid=10636 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171245301.301:58620): user pid=10636 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171245301.301:58621): user pid=10636 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171245601.622:58622): user pid=10672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171245601.623:58623): login pid=10672 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171245601.623:58624): user pid=10673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171245601.623:58625): login pid=10673 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171245601.625:58626): user pid=10674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171245601.626:58627): login pid=10674 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171245601.628:58628): user pid=10672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171245601.628:58629): user pid=10672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171245601.631:58630): user pid=10673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171245601.631:58631): user pid=10673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171245601.638:58632): user pid=10674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171245601.638:58633): user pid=10674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171245601.666:58634): user pid=10672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171245601.666:58635): user pid=10672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171245661.959:58636): user pid=10693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171245661.959:58637): login pid=10693 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171245661.964:58638): user pid=10693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171245661.964:58639): user pid=10693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171245662.855:58640): user pid=10693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171245662.855:58641): user pid=10693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171245901.863:58642): user pid=10730 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171245901.864:58643): login pid=10730 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171245901.868:58644): user pid=10730 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171245901.868:58645): user pid=10730 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171246201.198:58646): user pid=10770 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171246201.198:58647): login pid=10770 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171246201.200:58648): user pid=10771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171246201.200:58649): login pid=10771 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171246201.201:58650): user pid=10770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171246201.201:58651): user pid=10770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171246201.212:58652): user pid=10771 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171246201.213:58653): user pid=10771 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171246201.219:58654): user pid=10770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171246201.220:58655): user pid=10770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171246501.538:58656): user pid=10807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171246501.538:58657): login pid=10807 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171246501.541:58658): user pid=10807 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171246501.541:58659): user pid=10807 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171246801.861:58660): user pid=10840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171246801.861:58661): login pid=10840 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171246801.862:58662): user pid=10841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171246801.862:58663): login pid=10841 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171246801.867:58664): user pid=10840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171246801.867:58665): user pid=10840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171246801.872:58666): user pid=10841 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171246801.872:58667): user pid=10841 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171246801.887:58668): user pid=10840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171246801.887:58669): user pid=10840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171247101.216:58670): user pid=10876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171247101.216:58671): login pid=10876 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171247101.220:58672): user pid=10876 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171247101.220:58673): user pid=10876 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171247401.541:58674): user pid=10909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171247401.541:58675): login pid=10909 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171247401.543:58676): user pid=10910 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171247401.543:58677): login pid=10910 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171247401.545:58678): user pid=10909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171247401.545:58679): user pid=10909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171247401.557:58680): user pid=10910 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171247401.557:58681): user pid=10910 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171247401.563:58682): user pid=10909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171247401.563:58683): user pid=10909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171247701.887:58684): user pid=10946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171247701.888:58685): login pid=10946 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171247701.891:58686): user pid=10946 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171247701.891:58687): user pid=10946 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171248001.219:58688): user pid=10982 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171248001.219:58689): login pid=10982 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171248001.221:58690): user pid=10983 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171248001.222:58691): login pid=10983 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171248001.222:58692): user pid=10982 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171248001.222:58693): user pid=10982 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171248001.232:58694): user pid=10983 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171248001.232:58695): user pid=10983 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171248001.241:58696): user pid=10982 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171248001.241:58697): user pid=10982 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171248301.566:58698): user pid=11018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171248301.567:58699): login pid=11018 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171248301.570:58700): user pid=11018 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171248301.570:58701): user pid=11018 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171248601.891:58702): user pid=11052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171248601.891:58703): login pid=11052 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171248601.893:58704): user pid=11053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171248601.894:58705): login pid=11053 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171248601.894:58706): user pid=11052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171248601.894:58707): user pid=11052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171248601.905:58708): user pid=11053 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171248601.906:58709): user pid=11053 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171248601.914:58710): user pid=11052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171248601.915:58711): user pid=11052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171248901.230:58712): user pid=11090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171248901.231:58713): login pid=11090 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171248901.234:58714): user pid=11090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171248901.235:58715): user pid=11090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171249201.564:58716): user pid=11124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171249201.564:58717): login pid=11124 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171249201.565:58718): user pid=11125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171249201.565:58719): login pid=11125 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171249201.570:58720): user pid=11124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171249201.570:58721): user pid=11124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171249201.576:58722): user pid=11125 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171249201.576:58723): user pid=11125 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171249201.590:58724): user pid=11124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171249201.590:58725): user pid=11124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171249261.903:58726): user pid=11140 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171249261.903:58727): login pid=11140 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171249261.907:58728): user pid=11140 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171249261.907:58729): user pid=11140 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171249262.792:58730): user pid=11140 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171249262.792:58731): user pid=11140 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171249501.801:58732): user pid=11176 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171249501.801:58733): login pid=11176 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171249501.806:58734): user pid=11176 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171249501.806:58735): user pid=11176 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171249801.124:58736): user pid=11211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171249801.125:58737): login pid=11211 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171249801.127:58738): user pid=11212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171249801.127:58739): login pid=11212 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171249801.131:58740): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171249801.131:58741): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171249801.133:58742): user pid=11212 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171249801.133:58743): user pid=11212 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171249801.160:58744): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171249801.160:58745): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171250101.459:58746): user pid=11248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171250101.459:58747): login pid=11248 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171250101.462:58748): user pid=11248 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171250101.462:58749): user pid=11248 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171250401.783:58750): user pid=11281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171250401.783:58751): login pid=11281 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171250401.786:58752): user pid=11282 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171250401.786:58753): login pid=11282 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171250401.789:58754): user pid=11281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171250401.789:58755): user pid=11281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171250401.791:58756): user pid=11282 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171250401.791:58757): user pid=11282 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171250401.818:58758): user pid=11281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171250401.818:58759): user pid=11281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171250701.124:58760): user pid=11320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171250701.124:58761): login pid=11320 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171250701.128:58762): user pid=11320 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171250701.128:58763): user pid=11320 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171251001.448:58764): user pid=11356 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171251001.449:58765): login pid=11356 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171251001.451:58766): user pid=11357 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171251001.451:58767): login pid=11357 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171251001.453:58768): user pid=11356 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171251001.453:58769): user pid=11356 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171251001.463:58770): user pid=11357 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171251001.463:58771): user pid=11357 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171251001.472:58772): user pid=11356 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171251001.472:58773): user pid=11356 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171251301.783:58774): user pid=11391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171251301.783:58775): login pid=11391 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171251301.787:58776): user pid=11391 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171251301.787:58777): user pid=11391 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171251601.109:58778): user pid=11444 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171251601.109:58779): login pid=11444 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171251601.109:58780): user pid=11445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171251601.110:58781): login pid=11445 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171251601.114:58782): user pid=11444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171251601.114:58783): user pid=11444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171251601.115:58784): user pid=11445 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171251601.115:58785): user pid=11445 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171251601.144:58786): user pid=11444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171251601.145:58787): user pid=11444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171251756.825:58788): avc: denied { search } for pid=11507 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171251756.825:58788): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=11507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171251756.826:58789): avc: denied { search } for pid=11507 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171251756.826:58789): avc: denied { write } for pid=11507 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171251756.826:58789): avc: denied { add_name } for pid=11507 comm="pyzor" name="zMAy9h" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171251756.826:58789): avc: denied { create } for pid=11507 comm="pyzor" name="zMAy9h" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171251756.826:58789): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=11507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171251756.827:58790): avc: denied { getattr } for pid=11507 comm="pyzor" name="zMAy9h" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171251756.827:58790): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffacda7bc0 a2=7fffacda7bc0 a3=3 items=0 ppid=6550 pid=11507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171251756.827:58790): path="/tmp/zMAy9h" >type=AVC msg=audit(1171251756.827:58791): avc: denied { write } for pid=11507 comm="pyzor" name="zMAy9h" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171251756.827:58791): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=11507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171251756.827:58791): path="/tmp/zMAy9h" >type=AVC msg=audit(1171251756.827:58792): avc: denied { remove_name } for pid=11507 comm="pyzor" name="zMAy9h" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171251756.827:58792): avc: denied { unlink } for pid=11507 comm="pyzor" name="zMAy9h" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171251756.827:58792): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=11507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171251756.828:58793): avc: denied { read } for pid=11507 comm="pyzor" name="tmptWKqPJ" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171251756.828:58793): arch=c000003e syscall=0 success=yes exit=2887 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=11507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171251756.828:58793): path=2F746D702F746D7074574B71504A202864656C6574656429 >type=AVC msg=audit(1171251761.787:58794): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171251761.787:58794): arch=c000003e syscall=62 success=yes exit=0 a0=2cf3 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171251761.821:58795): avc: denied { write } for pid=11501 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171251761.821:58795): avc: denied { add_name } for pid=11501 comm="procmail" name="_tzC.xI-zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171251761.821:58795): arch=c000003e syscall=2 success=yes exit=6 a0=61f2e0 a1=c1 a2=124 a3=61f2e0 items=0 ppid=11498 pid=11501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171251761.821:58796): avc: denied { remove_name } for pid=11501 comm="procmail" name="_tzC.xI-zFB.douglas" dev=dm-0 ino=12487644 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171251761.821:58796): arch=c000003e syscall=87 success=yes exit=0 a0=61f2e0 a1=61f2c0 a2=7fff8f5c9ef0 a3=61f2e0 items=0 ppid=11498 pid=11501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171251901.443:58797): user pid=11562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171251901.444:58798): login pid=11562 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171251901.447:58799): user pid=11562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171251901.447:58800): user pid=11562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171252166.699:58801): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171252166.699:58801): arch=c000003e syscall=2 success=yes exit=12 a0=2fbef10 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171252166.699:58802): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171252166.699:58802): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171252166.699:58802): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171252166.713:58803): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171252166.713:58803): arch=c000003e syscall=2 success=yes exit=9 a0=32a6a90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171252167.302:58804): avc: denied { getattr } for pid=11601 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171252167.302:58804): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff2b7a6750 a2=7fff2b7a6750 a3=6c6280 items=0 ppid=6550 pid=11601 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171252167.302:58804): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171252167.303:58805): avc: denied { read } for pid=11601 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171252167.303:58805): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=11601 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171252172.281:58806): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634228 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171252172.281:58806): arch=c000003e syscall=86 success=yes exit=0 a0=2fbb280 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171252172.281:58807): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634228 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171252172.281:58807): arch=c000003e syscall=87 success=yes exit=0 a0=2fbb280 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171252172.282:58808): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171252172.282:58808): arch=c000003e syscall=2 success=yes exit=9 a0=30cd220 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171252172.296:58809): avc: denied { create } for pid=11597 comm="procmail" name="_N1C.MP-zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171252172.296:58809): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=11594 pid=11597 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171252172.299:58810): avc: denied { write } for pid=11597 comm="procmail" name="_N1C.MP-zFB.douglas" dev=dm-0 ino=12487644 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171252172.299:58810): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=11594 pid=11597 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171252172.299:58810): path="/home/dhighley/_N1C.MP-zFB.douglas" >type=AVC msg=audit(1171252172.299:58811): avc: denied { getattr } for pid=11597 comm="procmail" name="_N1C.MP-zFB.douglas" dev=dm-0 ino=12487644 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171252172.299:58811): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff2860ec40 a2=7fff2860ec40 a3=61b650 items=0 ppid=11594 pid=11597 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171252172.299:58811): path="/home/dhighley/_N1C.MP-zFB.douglas" >type=AVC msg=audit(1171252172.299:58812): avc: denied { link } for pid=11597 comm="procmail" name="_N1C.MP-zFB.douglas" dev=dm-0 ino=12487644 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171252172.299:58812): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61f070 a2=7fff2860eb60 a3=61b650 items=0 ppid=11594 pid=11597 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171252172.299:58813): avc: denied { unlink } for pid=11597 comm="procmail" name="_N1C.MP-zFB.douglas" dev=dm-0 ino=12487644 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171252172.299:58813): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61f070 a2=7fff2860eb60 a3=61b650 items=0 ppid=11594 pid=11597 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171252201.779:58814): user pid=11607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171252201.779:58815): login pid=11607 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171252201.781:58816): user pid=11608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171252201.781:58817): login pid=11608 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171252201.783:58818): user pid=11607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171252201.783:58819): user pid=11607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171252201.794:58820): user pid=11608 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171252201.794:58821): user pid=11608 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171252201.805:58822): user pid=11607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171252201.805:58823): user pid=11607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171252286.412:58824): avc: denied { getattr } for pid=11629 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171252286.412:58824): arch=c000003e syscall=4 success=yes exit=0 a0=8c4490 a1=7fff4c73bd90 a2=7fff4c73bd90 a3=3 items=0 ppid=30534 pid=11629 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171252286.412:58824): path="/bin/hostname" >type=AVC msg=audit(1171252286.412:58825): avc: denied { execute } for pid=11629 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171252286.412:58825): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=1 a2=0 a3=3 items=0 ppid=30534 pid=11629 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1171252286.413:58826): avc: denied { read } for pid=11629 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171252286.413:58826): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=4 a2=0 a3=3 items=0 ppid=30534 pid=11629 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1171252286.413:58827): avc: denied { execute_no_trans } for pid=11629 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171252286.413:58827): arch=c000003e syscall=59 success=yes exit=0 a0=8c4490 a1=8c4bc0 a2=8c4750 a3=8 items=0 ppid=30534 pid=11629 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="hostname" exe="/bin/hostname" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171252286.413:58827): path="/bin/hostname" >type=USER_ACCT msg=audit(1171252501.126:58828): user pid=11656 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171252501.126:58829): login pid=11656 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171252501.130:58830): user pid=11656 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171252501.130:58831): user pid=11656 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171252801.466:58832): user pid=11963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171252801.467:58833): user pid=11962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171252801.467:58834): login pid=11962 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171252801.467:58835): login pid=11963 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171252801.473:58836): user pid=11963 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171252801.473:58837): user pid=11963 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171252801.477:58838): user pid=11962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171252801.477:58839): user pid=11962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171252801.506:58840): user pid=11962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171252801.507:58841): user pid=11962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171252861.832:58842): user pid=11998 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171252861.832:58843): login pid=11998 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171252861.837:58844): user pid=11998 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171252861.837:58845): user pid=11998 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171252862.779:58846): user pid=11998 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171252862.780:58847): user pid=11998 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171253101.787:58848): user pid=12038 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171253101.788:58849): login pid=12038 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171253101.792:58850): user pid=12038 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171253101.792:58851): user pid=12038 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171253312.285:58852): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171253312.285:58852): arch=c000003e syscall=2 success=yes exit=12 a0=322e540 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171253312.285:58853): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171253312.285:58853): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171253312.285:58853): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171253312.296:58854): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171253312.296:58854): arch=c000003e syscall=2 success=yes exit=9 a0=31d2ff0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171253312.822:58855): avc: denied { search } for pid=12090 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171253312.822:58855): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171253312.822:58856): avc: denied { getattr } for pid=12090 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171253312.822:58856): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffac67d620 a2=7fffac67d620 a3=6c6280 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171253312.822:58856): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171253312.822:58857): avc: denied { read } for pid=12090 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171253312.822:58857): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171253312.823:58858): avc: denied { search } for pid=12090 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171253312.823:58858): avc: denied { write } for pid=12090 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171253312.823:58858): avc: denied { add_name } for pid=12090 comm="pyzor" name="J6BrMb" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171253312.823:58858): avc: denied { create } for pid=12090 comm="pyzor" name="J6BrMb" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171253312.823:58858): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171253312.823:58859): avc: denied { getattr } for pid=12090 comm="pyzor" name="J6BrMb" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171253312.823:58859): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffac67bb10 a2=7fffac67bb10 a3=3 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171253312.823:58859): path="/tmp/J6BrMb" >type=AVC msg=audit(1171253312.823:58860): avc: denied { write } for pid=12090 comm="pyzor" name="J6BrMb" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171253312.823:58860): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15804 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171253312.823:58860): path="/tmp/J6BrMb" >type=AVC msg=audit(1171253312.823:58861): avc: denied { remove_name } for pid=12090 comm="pyzor" name="J6BrMb" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171253312.823:58861): avc: denied { unlink } for pid=12090 comm="pyzor" name="J6BrMb" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171253312.823:58861): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171253312.824:58862): avc: denied { read } for pid=12090 comm="pyzor" name="tmpKznqdt" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171253312.824:58862): arch=c000003e syscall=0 success=yes exit=2577 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8774 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171253312.824:58862): path=2F746D702F746D704B7A6E716474202864656C6574656429 >type=AVC msg=audit(1171253317.784:58863): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171253317.784:58863): arch=c000003e syscall=62 success=yes exit=0 a0=2f3a a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171253319.799:58864): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634215 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171253319.799:58864): arch=c000003e syscall=86 success=yes exit=0 a0=303f320 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171253319.799:58865): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634215 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171253319.799:58865): arch=c000003e syscall=87 success=yes exit=0 a0=303f320 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171253319.800:58866): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171253319.800:58866): arch=c000003e syscall=2 success=yes exit=9 a0=331bff0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171253319.810:58867): avc: denied { write } for pid=12085 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171253319.810:58867): avc: denied { add_name } for pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171253319.810:58867): avc: denied { create } for pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171253319.810:58867): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=12082 pid=12085 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171253319.811:58868): avc: denied { write } for pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171253319.811:58868): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=12082 pid=12085 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171253319.811:58868): path="/home/dhighley/_18C.Hh-zFB.douglas" >type=AVC msg=audit(1171253319.819:58869): avc: denied { getattr } for pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171253319.819:58869): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff32df57e0 a2=7fff32df57e0 a3=61b650 items=0 ppid=12082 pid=12085 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171253319.819:58869): path="/home/dhighley/_18C.Hh-zFB.douglas" >type=AVC msg=audit(1171253319.819:58870): avc: denied { link } for pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171253319.819:58870): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61f150 a2=7fff32df5700 a3=61b650 items=0 ppid=12082 pid=12085 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171253319.820:58871): avc: denied { remove_name } for pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171253319.820:58871): avc: denied { unlink } for pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171253319.820:58871): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61f150 a2=7fff32df5700 a3=61b650 items=0 ppid=12082 pid=12085 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171253319.820:58872): avc: denied { append } for pid=12085 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171253319.820:58872): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=12082 pid=12085 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171253401.116:58873): user pid=12103 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171253401.116:58874): login pid=12103 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171253401.118:58875): user pid=12104 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171253401.118:58876): login pid=12104 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171253401.120:58877): user pid=12103 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171253401.120:58878): user pid=12103 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171253401.124:58879): user pid=12104 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171253401.124:58880): user pid=12104 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171253401.146:58881): user pid=12103 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171253401.146:58882): user pid=12103 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171253587.941:58883): user pid=10673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171253587.942:58884): user pid=10673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171253701.948:58885): user pid=12273 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171253701.949:58886): login pid=12273 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171253701.952:58887): user pid=12273 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171253701.952:58888): user pid=12273 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171254001.316:58889): user pid=12310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171254001.317:58890): login pid=12310 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171254001.318:58891): user pid=12311 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171254001.319:58892): login pid=12311 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171254001.323:58893): user pid=12310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171254001.323:58894): user pid=12310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171254001.326:58895): user pid=12311 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171254001.326:58896): user pid=12311 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171254001.351:58897): user pid=12310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171254001.351:58898): user pid=12310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171254301.685:58899): user pid=12347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171254301.686:58900): login pid=12347 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171254301.689:58901): user pid=12347 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171254301.689:58902): user pid=12347 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171254601.064:58903): user pid=12382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171254601.064:58904): login pid=12382 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171254601.067:58905): user pid=12383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171254601.067:58906): login pid=12383 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171254601.070:58907): user pid=12382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171254601.070:58908): user pid=12382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171254601.072:58909): user pid=12383 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171254601.072:58910): user pid=12383 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171254601.095:58911): user pid=12382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171254601.095:58912): user pid=12382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171254653.818:58913): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171254653.818:58913): arch=c000003e syscall=2 success=yes exit=12 a0=30cdfd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171254653.818:58914): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171254653.818:58914): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171254653.818:58914): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171254653.826:58915): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171254653.826:58915): arch=c000003e syscall=2 success=yes exit=9 a0=9fd990 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171254654.305:58916): avc: denied { getattr } for pid=12406 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171254654.305:58916): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffff1da6d50 a2=7ffff1da6d50 a3=6c6280 items=0 ppid=6550 pid=12406 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171254654.305:58916): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171254654.305:58917): avc: denied { read } for pid=12406 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171254654.305:58917): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12406 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171254654.306:58918): avc: denied { search } for pid=12406 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171254654.306:58918): avc: denied { write } for pid=12406 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171254654.306:58918): avc: denied { add_name } for pid=12406 comm="pyzor" name="42AbGU" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171254654.306:58918): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=12406 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171254654.307:58919): avc: denied { remove_name } for pid=12406 comm="pyzor" name="42AbGU" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171254654.307:58919): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=12406 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171254659.271:58920): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171254659.271:58920): arch=c000003e syscall=62 success=yes exit=0 a0=3076 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171254659.389:58921): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171254659.389:58921): arch=c000003e syscall=86 success=yes exit=0 a0=2da8dd0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171254659.389:58922): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171254659.389:58922): arch=c000003e syscall=87 success=yes exit=0 a0=2da8dd0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171254659.390:58923): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171254659.390:58923): arch=c000003e syscall=2 success=yes exit=9 a0=335ae50 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171254659.443:58924): avc: denied { write } for pid=12402 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171254659.443:58924): avc: denied { add_name } for pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171254659.443:58924): avc: denied { create } for pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171254659.443:58924): arch=c000003e syscall=2 success=yes exit=6 a0=61c980 a1=c1 a2=124 a3=61c980 items=0 ppid=12399 pid=12402 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171254659.443:58925): avc: denied { write } for pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171254659.443:58925): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c980 items=0 ppid=12399 pid=12402 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171254659.443:58925): path="/home/dhighley/_yBD.D2-zFB.douglas" >type=AVC msg=audit(1171254659.444:58926): avc: denied { getattr } for pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171254659.444:58926): arch=c000003e syscall=4 success=yes exit=0 a0=61c980 a1=7fff3d0c2ac0 a2=7fff3d0c2ac0 a3=61c980 items=0 ppid=12399 pid=12402 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171254659.444:58926): path="/home/dhighley/_yBD.D2-zFB.douglas" >type=AVC msg=audit(1171254659.444:58927): avc: denied { link } for pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171254659.444:58927): arch=c000003e syscall=86 success=yes exit=0 a0=61c980 a1=61b510 a2=7fff3d0c29e0 a3=61c980 items=0 ppid=12399 pid=12402 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171254659.444:58928): avc: denied { remove_name } for pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171254659.444:58928): avc: denied { unlink } for pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171254659.444:58928): arch=c000003e syscall=87 success=yes exit=0 a0=61c980 a1=61b510 a2=7fff3d0c29e0 a3=61c980 items=0 ppid=12399 pid=12402 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171254734.098:58929): avc: denied { search } for pid=12420 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171254734.098:58929): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12420 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171254734.099:58930): avc: denied { create } for pid=12420 comm="pyzor" name="um7pmL" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171254734.099:58930): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=12420 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171254734.099:58931): avc: denied { getattr } for pid=12420 comm="pyzor" name="um7pmL" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171254734.099:58931): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff6f283720 a2=7fff6f283720 a3=3 items=0 ppid=6550 pid=12420 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171254734.099:58931): path="/tmp/um7pmL" >type=AVC msg=audit(1171254734.100:58932): avc: denied { write } for pid=12420 comm="pyzor" name="um7pmL" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171254734.100:58932): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=12420 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171254734.100:58932): path="/tmp/um7pmL" >type=AVC msg=audit(1171254734.100:58933): avc: denied { unlink } for pid=12420 comm="pyzor" name="um7pmL" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171254734.100:58933): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=12420 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171254734.101:58934): avc: denied { read } for pid=12420 comm="pyzor" name="tmpx85F5P" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171254734.101:58934): arch=c000003e syscall=0 success=yes exit=709 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=12420 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171254734.101:58934): path=2F746D702F746D70783835463550202864656C6574656429 >type=AVC msg=audit(1171254734.901:58935): avc: denied { append } for pid=12416 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171254734.901:58935): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=12413 pid=12416 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171254901.435:58936): user pid=12436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171254901.436:58937): login pid=12436 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171254901.440:58938): user pid=12436 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171254901.440:58939): user pid=12436 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171255141.680:58940): avc: denied { search } for pid=12473 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171255141.680:58940): avc: denied { write } for pid=12473 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171255141.680:58940): avc: denied { add_name } for pid=12473 comm="pyzor" name="9QB28X" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171255141.680:58940): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=12473 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171255141.681:58941): avc: denied { remove_name } for pid=12473 comm="pyzor" name="9QB28X" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171255141.681:58941): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=12473 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171255201.787:58942): user pid=12479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171255201.788:58943): login pid=12479 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171255201.788:58944): user pid=12480 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171255201.789:58945): login pid=12480 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171255201.790:58946): user pid=12479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171255201.790:58947): user pid=12479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171255201.801:58948): user pid=12480 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171255201.801:58949): user pid=12480 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171255201.813:58950): user pid=12479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171255201.813:58951): user pid=12479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171255501.152:58952): user pid=12516 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171255501.152:58953): login pid=12516 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171255501.155:58954): user pid=12516 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171255501.155:58955): user pid=12516 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171255801.502:58956): user pid=12552 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171255801.502:58957): login pid=12552 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171255801.503:58958): user pid=12551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171255801.504:58959): login pid=12551 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171255801.508:58960): user pid=12552 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171255801.508:58961): user pid=12552 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171255801.511:58962): user pid=12551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171255801.511:58963): user pid=12551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171255801.532:58964): user pid=12551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171255801.532:58965): user pid=12551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171256101.882:58966): user pid=12586 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171256101.883:58967): login pid=12586 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171256101.887:58968): user pid=12586 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171256101.887:58969): user pid=12586 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171256136.063:58970): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171256136.063:58970): arch=c000003e syscall=62 success=yes exit=0 a0=313d a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171256401.254:58971): user pid=12629 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171256401.254:58972): login pid=12629 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171256401.256:58973): user pid=12630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171256401.256:58974): login pid=12630 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171256401.257:58975): user pid=12629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171256401.257:58976): user pid=12629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171256401.259:58977): user pid=12631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171256401.259:58978): login pid=12631 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171256401.268:58979): user pid=12630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171256401.268:58980): user pid=12630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171256401.276:58981): user pid=12631 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171256401.276:58982): user pid=12631 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171256401.288:58983): user pid=12629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171256401.288:58984): user pid=12629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171256461.634:58985): user pid=12650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171256461.634:58986): login pid=12650 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171256461.638:58987): user pid=12650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171256461.638:58988): user pid=12650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171256462.607:58989): user pid=12650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171256462.607:58990): user pid=12650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171256701.616:58991): user pid=12686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171256701.617:58992): login pid=12686 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171256701.621:58993): user pid=12686 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171256701.621:58994): user pid=12686 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171257001.988:58995): user pid=12722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171257001.988:58996): login pid=12722 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171257001.990:58997): user pid=12723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171257001.990:58998): login pid=12723 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171257001.991:58999): user pid=12722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171257001.991:59000): user pid=12722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171257002.003:59001): user pid=12723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171257002.003:59002): user pid=12723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171257002.013:59003): user pid=12722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171257002.013:59004): user pid=12722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171257119.917:59005): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257119.917:59005): arch=c000003e syscall=2 success=yes exit=12 a0=31c8640 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171257119.918:59006): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257119.918:59006): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171257119.918:59006): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171257119.926:59007): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171257119.926:59007): arch=c000003e syscall=2 success=yes exit=9 a0=3125780 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171257120.519:59008): avc: denied { getattr } for pid=12751 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171257120.519:59008): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff5128f230 a2=7fff5128f230 a3=6c6280 items=0 ppid=6550 pid=12751 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171257120.519:59008): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171257120.519:59009): avc: denied { read } for pid=12751 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171257120.519:59009): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12751 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171257122.099:59010): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257122.099:59010): arch=c000003e syscall=86 success=yes exit=0 a0=318d220 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171257122.099:59011): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257122.099:59011): arch=c000003e syscall=87 success=yes exit=0 a0=318d220 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171257122.100:59012): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171257122.100:59012): arch=c000003e syscall=2 success=yes exit=9 a0=31b3cf0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171257122.116:59013): avc: denied { create } for pid=12747 comm="procmail" name="_LHD.ic_zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257122.116:59013): arch=c000003e syscall=2 success=yes exit=6 a0=61d9d0 a1=c1 a2=124 a3=61d9d0 items=0 ppid=12744 pid=12747 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171257122.116:59014): avc: denied { write } for pid=12747 comm="procmail" name="_LHD.ic_zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257122.116:59014): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61d9d0 items=0 ppid=12744 pid=12747 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171257122.116:59014): path="/home/dhighley/_LHD.ic_zFB.douglas" >type=AVC msg=audit(1171257122.116:59015): avc: denied { getattr } for pid=12747 comm="procmail" name="_LHD.ic_zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257122.116:59015): arch=c000003e syscall=4 success=yes exit=0 a0=61d9d0 a1=7fffa0176b70 a2=7fffa0176b70 a3=61d9d0 items=0 ppid=12744 pid=12747 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171257122.116:59015): path="/home/dhighley/_LHD.ic_zFB.douglas" >type=AVC msg=audit(1171257122.116:59016): avc: denied { link } for pid=12747 comm="procmail" name="_LHD.ic_zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257122.116:59016): arch=c000003e syscall=86 success=yes exit=0 a0=61d9d0 a1=61b510 a2=7fffa0176a90 a3=61d9d0 items=0 ppid=12744 pid=12747 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171257122.116:59017): avc: denied { unlink } for pid=12747 comm="procmail" name="_LHD.ic_zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257122.116:59017): arch=c000003e syscall=87 success=yes exit=0 a0=61d9d0 a1=61b510 a2=7fffa0176a90 a3=61d9d0 items=0 ppid=12744 pid=12747 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171257301.353:59018): user pid=12786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171257301.354:59019): login pid=12786 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171257301.357:59020): user pid=12786 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171257301.357:59021): user pid=12786 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171257601.735:59022): user pid=12838 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171257601.736:59023): login pid=12838 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171257601.737:59024): user pid=12839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171257601.737:59025): login pid=12839 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171257601.740:59026): user pid=12838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171257601.740:59027): user pid=12838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171257601.744:59028): user pid=12839 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171257601.744:59029): user pid=12839 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171257601.771:59030): user pid=12838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171257601.772:59031): user pid=12838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171257901.126:59032): user pid=12897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171257901.127:59033): login pid=12897 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171257901.130:59034): user pid=12897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171257901.130:59035): user pid=12897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171257958.627:59036): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257958.627:59036): arch=c000003e syscall=2 success=yes exit=12 a0=3095cc0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171257958.627:59037): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257958.627:59037): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171257958.627:59037): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171257958.636:59038): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171257958.636:59038): arch=c000003e syscall=2 success=yes exit=9 a0=31c4fd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171257959.124:59039): avc: denied { search } for pid=12949 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171257959.124:59039): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171257959.124:59040): avc: denied { getattr } for pid=12949 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.124:59040): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff74aefa90 a2=7fff74aefa90 a3=6c6280 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171257959.124:59040): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171257959.125:59041): avc: denied { read } for pid=12949 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.125:59041): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171257959.125:59042): avc: denied { search } for pid=12949 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171257959.125:59042): avc: denied { write } for pid=12949 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171257959.125:59042): avc: denied { add_name } for pid=12949 comm="pyzor" name="IrKIqx" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171257959.125:59042): avc: denied { create } for pid=12949 comm="pyzor" name="IrKIqx" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.125:59042): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171257959.126:59043): avc: denied { getattr } for pid=12949 comm="pyzor" name="IrKIqx" dev=dm-0 ino=30703660 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.126:59043): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff74aedf80 a2=7fff74aedf80 a3=3 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171257959.126:59043): path="/tmp/IrKIqx" >type=AVC msg=audit(1171257959.126:59044): avc: denied { write } for pid=12949 comm="pyzor" name="IrKIqx" dev=dm-0 ino=30703660 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.126:59044): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171257959.126:59044): path="/tmp/IrKIqx" >type=AVC msg=audit(1171257959.126:59045): avc: denied { remove_name } for pid=12949 comm="pyzor" name="IrKIqx" dev=dm-0 ino=30703660 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171257959.126:59045): avc: denied { unlink } for pid=12949 comm="pyzor" name="IrKIqx" dev=dm-0 ino=30703660 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.126:59045): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171257959.127:59046): avc: denied { read } for pid=12949 comm="pyzor" name="tmpUqOsh5" dev=dm-0 ino=30703660 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.127:59046): arch=c000003e syscall=0 success=yes exit=711 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171257959.127:59046): path=2F746D702F746D7055714F736835202864656C6574656429 >type=AVC msg=audit(1171257959.673:59047): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.673:59047): arch=c000003e syscall=86 success=yes exit=0 a0=3380460 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171257959.673:59048): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.673:59048): arch=c000003e syscall=87 success=yes exit=0 a0=3380460 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171257959.674:59049): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.674:59049): arch=c000003e syscall=2 success=yes exit=9 a0=32ee300 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171257959.726:59050): avc: denied { create } for pid=12945 comm="procmail" name="_RKD.np_zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.726:59050): arch=c000003e syscall=2 success=yes exit=6 a0=61c990 a1=c1 a2=124 a3=61c990 items=0 ppid=12942 pid=12945 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171257959.726:59051): avc: denied { write } for pid=12945 comm="procmail" name="_RKD.np_zFB.douglas" dev=dm-0 ino=28442635 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.726:59051): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c990 items=0 ppid=12942 pid=12945 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171257959.726:59051): path="/home/dhighley/_RKD.np_zFB.douglas" >type=AVC msg=audit(1171257959.727:59052): avc: denied { getattr } for pid=12945 comm="procmail" name="_RKD.np_zFB.douglas" dev=dm-0 ino=28442635 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.727:59052): arch=c000003e syscall=4 success=yes exit=0 a0=61c990 a1=7fffa9d20720 a2=7fffa9d20720 a3=61c990 items=0 ppid=12942 pid=12945 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171257959.727:59052): path="/home/dhighley/_RKD.np_zFB.douglas" >type=AVC msg=audit(1171257959.727:59053): avc: denied { link } for pid=12945 comm="procmail" name="_RKD.np_zFB.douglas" dev=dm-0 ino=28442635 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.727:59053): arch=c000003e syscall=86 success=yes exit=0 a0=61c990 a1=61b520 a2=7fffa9d20640 a3=61c990 items=0 ppid=12942 pid=12945 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171257959.727:59054): avc: denied { unlink } for pid=12945 comm="procmail" name="_RKD.np_zFB.douglas" dev=dm-0 ino=28442635 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171257959.727:59054): arch=c000003e syscall=87 success=yes exit=0 a0=61c990 a1=61b520 a2=7fffa9d20640 a3=61c990 items=0 ppid=12942 pid=12945 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171258201.504:59055): user pid=13113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171258201.504:59056): login pid=13113 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171258201.504:59057): user pid=13114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171258201.504:59058): login pid=13114 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171258201.510:59059): user pid=13114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171258201.510:59060): user pid=13114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171258201.511:59061): user pid=13113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171258201.511:59062): user pid=13113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171258201.545:59063): user pid=13113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171258201.545:59064): user pid=13113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171258501.895:59065): user pid=13168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171258501.896:59066): login pid=13168 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171258501.899:59067): user pid=13168 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171258501.899:59068): user pid=13168 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171258801.259:59069): user pid=13213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171258801.259:59070): login pid=13213 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171258801.262:59071): user pid=13214 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171258801.263:59072): login pid=13214 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171258801.263:59073): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171258801.263:59074): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171258801.272:59075): user pid=13214 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171258801.272:59076): user pid=13214 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171258801.281:59077): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171258801.281:59078): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171259033.116:59079): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171259033.117:59080): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171259101.629:59081): user pid=13300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171259101.630:59082): login pid=13300 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171259101.634:59083): user pid=13300 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171259101.634:59084): user pid=13300 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171259401.962:59085): user pid=13336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171259401.962:59086): login pid=13336 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171259401.964:59087): user pid=13337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171259401.964:59088): login pid=13337 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171259401.970:59089): user pid=13336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171259401.970:59090): user pid=13336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171259401.974:59091): user pid=13337 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171259401.974:59092): user pid=13337 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171259401.989:59093): user pid=13336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171259401.990:59094): user pid=13336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171259701.315:59095): user pid=13373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171259701.315:59096): login pid=13373 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171259701.319:59097): user pid=13373 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171259701.319:59098): user pid=13373 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171260001.653:59099): user pid=13407 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171260001.653:59100): login pid=13407 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171260001.656:59101): user pid=13408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171260001.656:59102): login pid=13408 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171260001.659:59103): user pid=13407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171260001.659:59104): user pid=13407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171260001.661:59105): user pid=13408 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171260001.661:59106): user pid=13408 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171260001.690:59107): user pid=13407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171260001.690:59108): user pid=13407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171260061.984:59109): user pid=13423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171260061.985:59110): login pid=13423 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171260061.987:59111): user pid=13423 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171260061.987:59112): user pid=13423 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171260062.873:59113): user pid=13423 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171260062.873:59114): user pid=13423 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171260301.881:59115): user pid=13459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171260301.881:59116): login pid=13459 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171260301.885:59117): user pid=13459 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171260301.885:59118): user pid=13459 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171260601.224:59119): user pid=13494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171260601.224:59120): login pid=13494 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171260601.224:59121): user pid=13493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171260601.224:59122): login pid=13493 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171260601.230:59123): user pid=13494 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171260601.230:59124): user pid=13494 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171260601.236:59125): user pid=13493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171260601.236:59126): user pid=13493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171260601.258:59127): user pid=13493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171260601.259:59128): user pid=13493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171260901.556:59129): user pid=13530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171260901.557:59130): login pid=13530 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171260901.560:59131): user pid=13530 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171260901.560:59132): user pid=13530 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171261201.886:59133): user pid=13564 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171261201.886:59134): login pid=13564 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171261201.888:59135): user pid=13563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171261201.888:59136): login pid=13563 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171261201.890:59137): user pid=13563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171261201.891:59138): user pid=13563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171261201.894:59139): user pid=13564 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171261201.894:59140): user pid=13564 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171261201.910:59141): user pid=13563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171261201.911:59142): user pid=13563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171261501.221:59143): user pid=13601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171261501.222:59144): login pid=13601 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171261501.224:59145): user pid=13601 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171261501.225:59146): user pid=13601 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171261801.563:59147): user pid=13635 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171261801.563:59148): login pid=13635 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171261801.565:59149): user pid=13636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171261801.565:59150): login pid=13636 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171261801.566:59151): user pid=13635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171261801.567:59152): user pid=13635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171261801.578:59153): user pid=13636 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171261801.578:59154): user pid=13636 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171261801.586:59155): user pid=13635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171261801.586:59156): user pid=13635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171262100.351:59157): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171262100.351:59157): arch=c000003e syscall=2 success=yes exit=12 a0=322c3d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171262100.351:59158): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171262100.351:59158): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171262100.351:59158): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171262100.360:59159): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171262100.360:59159): arch=c000003e syscall=2 success=yes exit=9 a0=3260d90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171262101.217:59160): avc: denied { search } for pid=13683 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171262101.217:59160): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171262101.217:59161): avc: denied { getattr } for pid=13683 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.217:59161): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff789c3970 a2=7fff789c3970 a3=6c6280 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171262101.217:59161): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171262101.218:59162): avc: denied { read } for pid=13683 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.218:59162): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171262101.218:59163): avc: denied { search } for pid=13683 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171262101.218:59163): avc: denied { write } for pid=13683 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171262101.218:59163): avc: denied { add_name } for pid=13683 comm="pyzor" name="k9KdD_" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171262101.218:59163): avc: denied { create } for pid=13683 comm="pyzor" name="k9KdD_" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.218:59163): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171262101.219:59164): avc: denied { getattr } for pid=13683 comm="pyzor" name="k9KdD_" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.219:59164): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff789c1e60 a2=7fff789c1e60 a3=3 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171262101.219:59164): path="/tmp/k9KdD_" >type=AVC msg=audit(1171262101.219:59165): avc: denied { write } for pid=13683 comm="pyzor" name="k9KdD_" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.219:59165): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171262101.219:59165): path="/tmp/k9KdD_" >type=AVC msg=audit(1171262101.219:59166): avc: denied { remove_name } for pid=13683 comm="pyzor" name="k9KdD_" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171262101.219:59166): avc: denied { unlink } for pid=13683 comm="pyzor" name="k9KdD_" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.219:59166): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171262101.223:59167): avc: denied { read } for pid=13683 comm="pyzor" name="tmpZuRMxC" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.223:59167): arch=c000003e syscall=0 success=yes exit=1190 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171262101.223:59167): path=2F746D702F746D705A75524D7843202864656C6574656429 >type=AVC msg=audit(1171262101.529:59168): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634222 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.529:59168): arch=c000003e syscall=86 success=yes exit=0 a0=3125800 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171262101.529:59169): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634222 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.529:59169): arch=c000003e syscall=87 success=yes exit=0 a0=3125800 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171262101.530:59170): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.530:59170): arch=c000003e syscall=2 success=yes exit=9 a0=335aec0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171262101.550:59171): avc: denied { write } for pid=13679 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171262101.550:59171): avc: denied { add_name } for pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171262101.550:59171): avc: denied { create } for pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.550:59171): arch=c000003e syscall=2 success=yes exit=6 a0=61de20 a1=c1 a2=124 a3=61de20 items=0 ppid=13674 pid=13679 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171262101.550:59172): avc: denied { write } for pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.550:59172): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61de20 items=0 ppid=13674 pid=13679 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171262101.550:59172): path="/home/dhighley/_vVD.VqA0FB.douglas" >type=AVC msg=audit(1171262101.551:59173): avc: denied { getattr } for pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.551:59173): arch=c000003e syscall=4 success=yes exit=0 a0=61de20 a1=7fffe0a3b440 a2=7fffe0a3b440 a3=61de20 items=0 ppid=13674 pid=13679 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171262101.551:59173): path="/home/dhighley/_vVD.VqA0FB.douglas" >type=AVC msg=audit(1171262101.551:59174): avc: denied { link } for pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.551:59174): arch=c000003e syscall=86 success=yes exit=0 a0=61de20 a1=61e020 a2=7fffe0a3b360 a3=61de20 items=0 ppid=13674 pid=13679 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171262101.551:59175): avc: denied { remove_name } for pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171262101.551:59175): avc: denied { unlink } for pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.551:59175): arch=c000003e syscall=87 success=yes exit=0 a0=61de20 a1=61e020 a2=7fffe0a3b360 a3=61de20 items=0 ppid=13674 pid=13679 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171262101.551:59176): avc: denied { append } for pid=13679 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171262101.551:59176): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=13674 pid=13679 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171262101.902:59177): user pid=13684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171262101.902:59178): login pid=13684 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171262101.906:59179): user pid=13684 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171262101.906:59180): user pid=13684 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171262354.602:59181): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171262354.602:59181): arch=c000003e syscall=62 success=yes exit=0 a0=3597 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171262401.230:59182): user pid=13727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171262401.231:59183): login pid=13727 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171262401.231:59184): user pid=13726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171262401.231:59185): login pid=13726 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171262401.236:59186): user pid=13727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171262401.236:59187): user pid=13727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171262401.243:59188): user pid=13726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171262401.243:59189): user pid=13726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171262401.266:59190): user pid=13726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171262401.266:59191): user pid=13726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171262701.568:59192): user pid=13765 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171262701.568:59193): login pid=13765 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171262701.571:59194): user pid=13765 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171262701.571:59195): user pid=13765 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171263001.894:59196): user pid=13800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171263001.894:59197): login pid=13800 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171263001.897:59198): user pid=13801 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171263001.897:59199): login pid=13801 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171263001.900:59200): user pid=13800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171263001.900:59201): user pid=13800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171263001.903:59202): user pid=13801 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171263001.903:59203): user pid=13801 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171263001.922:59204): user pid=13800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171263001.922:59205): user pid=13800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171263006.060:59206): avc: denied { search } for pid=13822 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171263006.060:59206): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=13822 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171263006.061:59207): avc: denied { search } for pid=13822 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171263006.061:59207): avc: denied { write } for pid=13822 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171263006.061:59207): avc: denied { add_name } for pid=13822 comm="pyzor" name="DrbRHg" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171263006.061:59207): avc: denied { create } for pid=13822 comm="pyzor" name="DrbRHg" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171263006.061:59207): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=13822 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171263006.061:59208): avc: denied { getattr } for pid=13822 comm="pyzor" name="DrbRHg" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171263006.061:59208): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff374468e0 a2=7fff374468e0 a3=3 items=0 ppid=6550 pid=13822 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171263006.061:59208): path="/tmp/DrbRHg" >type=AVC msg=audit(1171263006.061:59209): avc: denied { write } for pid=13822 comm="pyzor" name="DrbRHg" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171263006.061:59209): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=13822 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171263006.061:59209): path="/tmp/DrbRHg" >type=AVC msg=audit(1171263006.061:59210): avc: denied { remove_name } for pid=13822 comm="pyzor" name="DrbRHg" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171263006.061:59210): avc: denied { unlink } for pid=13822 comm="pyzor" name="DrbRHg" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171263006.061:59210): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=13822 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171263006.062:59211): avc: denied { read } for pid=13822 comm="pyzor" name="tmpN98T0M" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171263006.062:59211): arch=c000003e syscall=0 success=yes exit=2267 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=13822 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171263006.062:59211): path=2F746D702F746D704E393854304D202864656C6574656429 >type=AVC msg=audit(1171263011.349:59212): avc: denied { append } for pid=13818 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171263011.349:59212): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=13813 pid=13818 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171263301.244:59213): user pid=13846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171263301.244:59214): login pid=13846 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171263301.248:59215): user pid=13846 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171263301.248:59216): user pid=13846 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171263552.215:59217): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1171263552.216:59218): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1171263562.496:59219): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171263562.496:59220): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171263562.505:59221): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171263562.513:59222): login pid=3672 uid=0 old auid=1000 new auid=1000 >type=USER_START msg=audit(1171263562.523:59223): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171263562.523:59224): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171263601.580:59225): user pid=14113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171263601.581:59226): user pid=14114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171263601.581:59227): login pid=14114 uid=0 old auid=4294967295 new auid=111 >type=LOGIN msg=audit(1171263601.582:59228): login pid=14113 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171263601.589:59229): user pid=14114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171263601.589:59230): user pid=14114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171263601.591:59231): user pid=14113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171263601.591:59232): user pid=14113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171263601.647:59233): user pid=14113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171263601.648:59234): user pid=14113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171263661.954:59235): user pid=14132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171263661.954:59236): login pid=14132 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171263661.956:59237): user pid=14132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171263661.957:59238): user pid=14132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171263662.918:59239): user pid=14132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171263662.918:59240): user pid=14132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171263901.928:59241): user pid=14187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171263901.928:59242): login pid=14187 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171263901.930:59243): user pid=14187 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171263901.930:59244): user pid=14187 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171264201.266:59245): user pid=14241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171264201.267:59246): login pid=14241 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171264201.269:59247): user pid=14242 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171264201.269:59248): login pid=14242 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171264201.270:59249): user pid=14241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171264201.270:59250): user pid=14241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171264201.277:59251): user pid=14242 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171264201.277:59252): user pid=14242 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171264201.289:59253): user pid=14241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171264201.290:59254): user pid=14241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171264338.366:59255): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171264338.367:59256): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171264387.507:59257): user pid=12630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171264387.507:59258): user pid=12630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171264501.513:59259): user pid=14353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171264501.514:59260): login pid=14353 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171264501.517:59261): user pid=14353 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171264501.517:59262): user pid=14353 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171264801.841:59263): user pid=14387 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171264801.841:59264): login pid=14387 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171264801.843:59265): user pid=14388 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171264801.844:59266): login pid=14388 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171264801.848:59267): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171264801.848:59268): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171264801.851:59269): user pid=14388 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171264801.851:59270): user pid=14388 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171264801.881:59271): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171264801.881:59272): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171265101.189:59273): user pid=14427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171265101.189:59274): login pid=14427 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171265101.193:59275): user pid=14427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171265101.193:59276): user pid=14427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171265209.053:59277): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171265209.053:59277): arch=c000003e syscall=2 success=yes exit=12 a0=33c96c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171265209.054:59278): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171265209.054:59278): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171265209.054:59278): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171265209.064:59279): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171265209.064:59279): arch=c000003e syscall=2 success=yes exit=9 a0=312da90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171265209.606:59280): avc: denied { search } for pid=14456 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171265209.606:59280): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171265209.606:59281): avc: denied { getattr } for pid=14456 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171265209.606:59281): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff97ee3e90 a2=7fff97ee3e90 a3=6c6280 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171265209.606:59281): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171265209.606:59282): avc: denied { read } for pid=14456 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171265209.606:59282): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171265209.607:59283): avc: denied { search } for pid=14456 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171265209.607:59283): avc: denied { write } for pid=14456 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171265209.607:59283): avc: denied { add_name } for pid=14456 comm="pyzor" name="iwn2lW" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171265209.607:59283): avc: denied { create } for pid=14456 comm="pyzor" name="iwn2lW" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171265209.607:59283): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171265209.607:59284): avc: denied { getattr } for pid=14456 comm="pyzor" name="iwn2lW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171265209.607:59284): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff97ee2380 a2=7fff97ee2380 a3=3 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171265209.607:59284): path="/tmp/iwn2lW" >type=AVC msg=audit(1171265209.608:59285): avc: denied { write } for pid=14456 comm="pyzor" name="iwn2lW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171265209.608:59285): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171265209.608:59285): path="/tmp/iwn2lW" >type=AVC msg=audit(1171265209.608:59286): avc: denied { remove_name } for pid=14456 comm="pyzor" name="iwn2lW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171265209.608:59286): avc: denied { unlink } for pid=14456 comm="pyzor" name="iwn2lW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171265209.608:59286): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171265209.609:59287): avc: denied { read } for pid=14456 comm="pyzor" name="tmp8N8KG_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171265209.609:59287): arch=c000003e syscall=0 success=yes exit=1431 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171265209.609:59287): path=2F746D702F746D70384E384B475F202864656C6574656429 >type=AVC msg=audit(1171265211.791:59288): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171265211.791:59288): arch=c000003e syscall=86 success=yes exit=0 a0=3396330 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171265211.791:59289): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171265211.791:59289): arch=c000003e syscall=87 success=yes exit=0 a0=3396330 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171265211.793:59290): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171265211.793:59290): arch=c000003e syscall=2 success=yes exit=9 a0=31eb3c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171265211.807:59291): avc: denied { write } for pid=14452 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171265211.807:59291): avc: denied { add_name } for pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171265211.807:59291): avc: denied { create } for pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171265211.807:59291): arch=c000003e syscall=2 success=yes exit=6 a0=61eda0 a1=c1 a2=124 a3=61eda0 items=0 ppid=14447 pid=14452 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171265211.807:59292): avc: denied { write } for pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171265211.807:59292): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61eda0 items=0 ppid=14447 pid=14452 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171265211.807:59292): path="/home/dhighley/_0hD.7aB0FB.douglas" >type=AVC msg=audit(1171265211.808:59293): avc: denied { getattr } for pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171265211.808:59293): arch=c000003e syscall=4 success=yes exit=0 a0=61eda0 a1=7ffff8e29270 a2=7ffff8e29270 a3=61eda0 items=0 ppid=14447 pid=14452 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171265211.808:59293): path="/home/dhighley/_0hD.7aB0FB.douglas" >type=AVC msg=audit(1171265211.808:59294): avc: denied { link } for pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171265211.808:59294): arch=c000003e syscall=86 success=yes exit=0 a0=61eda0 a1=61efa0 a2=7ffff8e29190 a3=61eda0 items=0 ppid=14447 pid=14452 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171265211.808:59295): avc: denied { remove_name } for pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171265211.808:59295): avc: denied { unlink } for pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171265211.808:59295): arch=c000003e syscall=87 success=yes exit=0 a0=61eda0 a1=61efa0 a2=7ffff8e29190 a3=61eda0 items=0 ppid=14447 pid=14452 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171265211.808:59296): avc: denied { append } for pid=14452 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171265211.808:59296): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=14447 pid=14452 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171265401.518:59297): user pid=14476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171265401.518:59298): login pid=14476 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171265401.520:59299): user pid=14477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171265401.520:59300): login pid=14477 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171265401.521:59301): user pid=14476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171265401.521:59302): user pid=14476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171265401.525:59303): user pid=14477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171265401.525:59304): user pid=14477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171265401.547:59305): user pid=14476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171265401.547:59306): user pid=14476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171265701.862:59307): user pid=14517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171265701.862:59308): login pid=14517 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171265701.865:59309): user pid=14517 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171265701.865:59310): user pid=14517 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171266001.203:59311): user pid=14554 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171266001.204:59312): login pid=14554 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171266001.205:59313): user pid=14555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171266001.205:59314): login pid=14555 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171266001.210:59315): user pid=14554 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171266001.210:59316): user pid=14554 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171266001.213:59317): user pid=14555 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171266001.213:59318): user pid=14555 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171266001.229:59319): user pid=14554 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171266001.230:59320): user pid=14554 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171266301.551:59321): user pid=14592 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171266301.552:59322): login pid=14592 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171266301.556:59323): user pid=14592 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171266301.556:59324): user pid=14592 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171266601.882:59325): user pid=14625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171266601.882:59326): login pid=14625 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171266601.884:59327): user pid=14626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171266601.885:59328): login pid=14626 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171266601.885:59329): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171266601.885:59330): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171266601.895:59331): user pid=14626 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171266601.895:59332): user pid=14626 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171266601.903:59333): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171266601.903:59334): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171266781.223:59335): user pid=14652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171266781.223:59336): login pid=14652 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171266781.226:59337): user pid=14652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171266781.226:59338): user pid=14652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171266781.335:59339): user pid=14652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171266781.335:59340): user pid=14652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171266901.339:59341): user pid=14670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171266901.339:59342): login pid=14670 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171266901.342:59343): user pid=14670 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171266901.342:59344): user pid=14670 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171266979.653:59345): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171266979.653:59345): arch=c000003e syscall=2 success=yes exit=9 a0=30bfd40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171266980.532:59346): avc: denied { getattr } for pid=14699 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171266980.532:59346): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffbac87b00 a2=7fffbac87b00 a3=6c6280 items=0 ppid=6550 pid=14699 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171266980.532:59346): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171266980.532:59347): avc: denied { read } for pid=14699 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171266980.532:59347): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=14699 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171266980.533:59348): avc: denied { search } for pid=14699 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171266980.533:59348): avc: denied { write } for pid=14699 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171266980.533:59348): avc: denied { add_name } for pid=14699 comm="pyzor" name="qWFF43" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171266980.533:59348): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=14699 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171266980.534:59349): avc: denied { remove_name } for pid=14699 comm="pyzor" name="qWFF43" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171266980.534:59349): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=14699 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171266982.050:59350): avc: denied { ioctl } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171266982.050:59350): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171266982.050:59350): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.6550" >type=AVC msg=audit(1171266982.050:59351): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171266982.050:59351): arch=c000003e syscall=86 success=yes exit=0 a0=3039980 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171266982.050:59352): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171266982.050:59352): arch=c000003e syscall=87 success=yes exit=0 a0=3039980 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171266982.051:59353): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171266982.051:59353): arch=c000003e syscall=2 success=yes exit=9 a0=33c9c50 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171266982.079:59354): avc: denied { write } for pid=14695 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171266982.079:59354): avc: denied { add_name } for pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171266982.079:59354): avc: denied { create } for pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171266982.079:59354): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=14690 pid=14695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171266982.080:59355): avc: denied { write } for pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171266982.080:59355): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=14690 pid=14695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171266982.080:59355): path="/home/dhighley/_nlD.m2B0FB.douglas" >type=AVC msg=audit(1171266982.080:59356): avc: denied { getattr } for pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171266982.080:59356): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff261949b0 a2=7fff261949b0 a3=61b650 items=0 ppid=14690 pid=14695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171266982.080:59356): path="/home/dhighley/_nlD.m2B0FB.douglas" >type=AVC msg=audit(1171266982.080:59357): avc: denied { link } for pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171266982.080:59357): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61e880 a2=7fff261948d0 a3=61b650 items=0 ppid=14690 pid=14695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171266982.080:59358): avc: denied { remove_name } for pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171266982.080:59358): avc: denied { unlink } for pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171266982.080:59358): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e880 a2=7fff261948d0 a3=61b650 items=0 ppid=14690 pid=14695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171267201.669:59359): user pid=14721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171267201.669:59360): login pid=14721 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171267201.671:59361): user pid=14722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171267201.671:59362): login pid=14722 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171267201.673:59363): user pid=14721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171267201.673:59364): user pid=14721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171267201.674:59365): user pid=14723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171267201.674:59366): login pid=14723 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171267201.676:59367): user pid=14722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171267201.676:59368): user pid=14722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171267201.689:59369): user pid=14723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171267201.689:59370): user pid=14723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171267201.701:59371): user pid=14721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171267201.702:59372): user pid=14721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171267261.021:59373): user pid=14743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171267261.021:59374): login pid=14743 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171267261.025:59375): user pid=14743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171267261.025:59376): user pid=14743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171267261.934:59377): user pid=14743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171267261.934:59378): user pid=14743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171267501.944:59379): user pid=14782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171267501.944:59380): login pid=14782 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171267501.949:59381): user pid=14782 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171267501.949:59382): user pid=14782 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171267801.279:59383): user pid=14818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171267801.279:59384): login pid=14818 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171267801.281:59385): user pid=14819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171267801.281:59386): login pid=14819 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171267801.283:59387): user pid=14818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171267801.283:59388): user pid=14818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171267801.288:59389): user pid=14819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171267801.289:59390): user pid=14819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171267801.307:59391): user pid=14818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171267801.307:59392): user pid=14818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171268101.626:59393): user pid=14856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171268101.627:59394): login pid=14856 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171268101.631:59395): user pid=14856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171268101.631:59396): user pid=14856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171268401.954:59397): user pid=14896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171268401.954:59398): login pid=14896 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171268401.955:59399): user pid=14895 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171268401.955:59400): login pid=14895 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171268401.958:59401): user pid=14895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171268401.958:59402): user pid=14895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171268401.963:59403): user pid=14896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171268401.964:59404): user pid=14896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171268401.978:59405): user pid=14895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171268401.978:59406): user pid=14895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171268654.081:59407): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171268654.081:59407): arch=c000003e syscall=2 success=yes exit=12 a0=33c6e50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171268659.667:59408): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171268659.667:59408): arch=c000003e syscall=62 success=yes exit=0 a0=3a5e a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171268701.291:59409): user pid=14948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171268701.292:59410): login pid=14948 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171268701.295:59411): user pid=14948 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171268701.295:59412): user pid=14948 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171269001.627:59413): user pid=14983 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171269001.627:59414): login pid=14983 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171269001.628:59415): user pid=14984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171269001.628:59416): login pid=14984 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171269001.632:59417): user pid=14983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171269001.633:59418): user pid=14983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171269001.633:59419): user pid=14984 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171269001.633:59420): user pid=14984 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171269001.663:59421): user pid=14983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171269001.663:59422): user pid=14983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171269301.963:59423): user pid=15020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171269301.963:59424): login pid=15020 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171269301.966:59425): user pid=15020 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171269301.966:59426): user pid=15020 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171269601.291:59427): user pid=15053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171269601.291:59428): login pid=15053 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171269601.293:59429): user pid=15054 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171269601.294:59430): login pid=15054 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171269601.297:59431): user pid=15053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171269601.297:59432): user pid=15053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171269601.299:59433): user pid=15054 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171269601.299:59434): user pid=15054 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171269601.317:59435): user pid=15053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171269601.317:59436): user pid=15053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171269901.639:59437): user pid=15095 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171269901.639:59438): login pid=15095 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171269901.641:59439): user pid=15095 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171269901.642:59440): user pid=15095 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171270201.964:59441): user pid=15132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171270201.964:59442): login pid=15132 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171270201.966:59443): user pid=15133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171270201.966:59444): login pid=15133 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171270201.967:59445): user pid=15132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171270201.967:59446): user pid=15132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171270201.974:59447): user pid=15133 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171270201.974:59448): user pid=15133 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171270201.990:59449): user pid=15132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171270201.991:59450): user pid=15132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171270501.313:59451): user pid=15168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171270501.314:59452): login pid=15168 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171270501.316:59453): user pid=15168 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171270501.316:59454): user pid=15168 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171270801.641:59455): user pid=15202 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171270801.641:59456): login pid=15202 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171270801.643:59457): user pid=15203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171270801.643:59458): login pid=15203 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171270801.644:59459): user pid=15202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171270801.644:59460): user pid=15202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171270801.653:59461): user pid=15203 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171270801.653:59462): user pid=15203 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171270801.661:59463): user pid=15202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171270801.662:59464): user pid=15202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171270861.984:59465): user pid=15218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171270861.984:59466): login pid=15218 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171270861.988:59467): user pid=15218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171270861.988:59468): user pid=15218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171270862.869:59469): user pid=15218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171270862.870:59470): user pid=15218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171271101.877:59471): user pid=15253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171271101.878:59472): login pid=15253 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171271101.880:59473): user pid=15253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171271101.881:59474): user pid=15253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171271129.122:59475): avc: denied { search } for pid=15276 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171271129.122:59475): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=15276 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171271129.123:59476): avc: denied { search } for pid=15276 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171271129.123:59476): avc: denied { write } for pid=15276 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171271129.123:59476): avc: denied { add_name } for pid=15276 comm="pyzor" name="dEomte" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171271129.123:59476): avc: denied { create } for pid=15276 comm="pyzor" name="dEomte" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171271129.123:59476): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=15276 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171271129.124:59477): avc: denied { getattr } for pid=15276 comm="pyzor" name="dEomte" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171271129.124:59477): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff90973e10 a2=7fff90973e10 a3=3 items=0 ppid=6550 pid=15276 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171271129.124:59477): path="/tmp/dEomte" >type=AVC msg=audit(1171271129.124:59478): avc: denied { write } for pid=15276 comm="pyzor" name="dEomte" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171271129.124:59478): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=6550 pid=15276 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171271129.124:59478): path="/tmp/dEomte" >type=AVC msg=audit(1171271129.124:59479): avc: denied { remove_name } for pid=15276 comm="pyzor" name="dEomte" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171271129.124:59479): avc: denied { unlink } for pid=15276 comm="pyzor" name="dEomte" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171271129.124:59479): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=15276 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171271129.126:59480): avc: denied { read } for pid=15276 comm="pyzor" name="tmpOzDYfs" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171271129.126:59480): arch=c000003e syscall=0 success=yes exit=2427 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=15276 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171271129.126:59480): path=2F746D702F746D704F7A44596673202864656C6574656429 >type=AVC msg=audit(1171271134.120:59481): avc: denied { write } for pid=15272 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171271134.120:59481): avc: denied { add_name } for pid=15272 comm="procmail" name="_ouD.e3C0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171271134.120:59481): arch=c000003e syscall=2 success=yes exit=6 a0=620810 a1=c1 a2=124 a3=620810 items=0 ppid=15267 pid=15272 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171271134.121:59482): avc: denied { remove_name } for pid=15272 comm="procmail" name="_ouD.e3C0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171271134.121:59482): arch=c000003e syscall=87 success=yes exit=0 a0=620810 a1=620a10 a2=7fff1ba77390 a3=620810 items=0 ppid=15267 pid=15272 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171271134.121:59483): avc: denied { append } for pid=15272 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171271134.121:59483): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=15267 pid=15272 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171271401.202:59484): user pid=15301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171271401.202:59485): login pid=15301 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171271401.205:59486): user pid=15302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171271401.205:59487): login pid=15302 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171271401.206:59488): user pid=15301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171271401.206:59489): user pid=15301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171271401.219:59490): user pid=15302 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171271401.219:59491): user pid=15302 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171271401.226:59492): user pid=15301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171271401.227:59493): user pid=15301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171271701.550:59494): user pid=15339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171271701.551:59495): login pid=15339 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171271701.555:59496): user pid=15339 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171271701.555:59497): user pid=15339 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171272001.874:59498): user pid=15371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171272001.874:59499): login pid=15371 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171272001.877:59500): user pid=15372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171272001.877:59501): login pid=15372 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171272001.880:59502): user pid=15371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171272001.880:59503): user pid=15371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171272001.882:59504): user pid=15372 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171272001.882:59505): user pid=15372 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171272001.902:59506): user pid=15371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171272001.902:59507): user pid=15371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171272301.213:59508): user pid=15408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171272301.213:59509): login pid=15408 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171272301.216:59510): user pid=15408 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171272301.216:59511): user pid=15408 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171272601.541:59512): user pid=15442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171272601.541:59513): login pid=15442 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171272601.543:59514): user pid=15443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171272601.543:59515): login pid=15443 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171272601.545:59516): user pid=15442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171272601.545:59517): user pid=15442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171272601.548:59518): user pid=15443 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171272601.548:59519): user pid=15443 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171272601.564:59520): user pid=15442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171272601.564:59521): user pid=15442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171272694.178:59522): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171272694.178:59522): arch=c000003e syscall=2 success=yes exit=12 a0=331c480 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171272694.179:59523): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171272694.179:59523): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171272694.179:59523): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171272694.188:59524): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171272694.188:59524): arch=c000003e syscall=2 success=yes exit=9 a0=31a3ed0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171272694.988:59525): avc: denied { getattr } for pid=15472 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171272694.988:59525): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff1ed75d20 a2=7fff1ed75d20 a3=6c6280 items=0 ppid=6550 pid=15472 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171272694.988:59525): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171272694.988:59526): avc: denied { read } for pid=15472 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171272694.988:59526): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=15472 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171272699.951:59527): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171272699.951:59527): arch=c000003e syscall=62 success=yes exit=0 a0=3c70 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171272699.964:59528): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171272699.964:59528): arch=c000003e syscall=86 success=yes exit=0 a0=32c2140 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171272699.964:59529): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171272699.964:59529): arch=c000003e syscall=87 success=yes exit=0 a0=32c2140 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171272699.965:59530): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171272699.965:59530): arch=c000003e syscall=2 success=yes exit=9 a0=32c74a0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171272699.978:59531): avc: denied { create } for pid=15468 comm="procmail" name="_sxD.7PD0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171272699.978:59531): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=15463 pid=15468 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171272699.978:59532): avc: denied { write } for pid=15468 comm="procmail" name="_sxD.7PD0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171272699.978:59532): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=15463 pid=15468 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171272699.978:59532): path="/home/dhighley/_sxD.7PD0FB.douglas" >type=AVC msg=audit(1171272699.978:59533): avc: denied { getattr } for pid=15468 comm="procmail" name="_sxD.7PD0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171272699.978:59533): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff52e70870 a2=7fff52e70870 a3=61b650 items=0 ppid=15463 pid=15468 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171272699.978:59533): path="/home/dhighley/_sxD.7PD0FB.douglas" >type=AVC msg=audit(1171272699.978:59534): avc: denied { link } for pid=15468 comm="procmail" name="_sxD.7PD0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171272699.978:59534): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61e610 a2=7fff52e70790 a3=61b650 items=0 ppid=15463 pid=15468 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171272699.979:59535): avc: denied { unlink } for pid=15468 comm="procmail" name="_sxD.7PD0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171272699.979:59535): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e610 a2=7fff52e70790 a3=61b650 items=0 ppid=15463 pid=15468 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171272901.877:59536): user pid=15493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171272901.878:59537): login pid=15493 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171272901.882:59538): user pid=15493 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171272901.882:59539): user pid=15493 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171272972.167:59540): avc: denied { search } for pid=15517 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171272972.167:59540): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=15517 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171272972.168:59541): avc: denied { create } for pid=15517 comm="pyzor" name="iN8xua" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171272972.168:59541): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=15517 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171272972.168:59542): avc: denied { getattr } for pid=15517 comm="pyzor" name="iN8xua" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171272972.168:59542): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd934bbf0 a2=7fffd934bbf0 a3=2 items=0 ppid=6550 pid=15517 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171272972.168:59542): path="/tmp/iN8xua" >type=AVC msg=audit(1171272972.169:59543): avc: denied { write } for pid=15517 comm="pyzor" name="iN8xua" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171272972.169:59543): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=6550 pid=15517 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171272972.169:59543): path="/tmp/iN8xua" >type=AVC msg=audit(1171272972.169:59544): avc: denied { unlink } for pid=15517 comm="pyzor" name="iN8xua" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171272972.169:59544): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=15517 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171272972.170:59545): avc: denied { read } for pid=15517 comm="pyzor" name="tmpTpm06w" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171272972.170:59545): arch=c000003e syscall=0 success=yes exit=154 a0=4 a1=2aaaaf34d000 a2=1000 a3=1b items=0 ppid=6550 pid=15517 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171272972.170:59545): path=2F746D702F746D7054706D303677202864656C6574656429 >type=USER_ACCT msg=audit(1171273201.205:59546): user pid=15540 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171273201.205:59547): login pid=15540 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171273201.208:59548): user pid=15541 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171273201.208:59549): login pid=15541 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171273201.211:59550): user pid=15540 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171273201.211:59551): user pid=15540 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171273201.213:59552): user pid=15541 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171273201.213:59553): user pid=15541 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171273201.233:59554): user pid=15540 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171273201.233:59555): user pid=15540 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171273501.549:59556): user pid=15578 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171273501.549:59557): login pid=15578 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171273501.553:59558): user pid=15578 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171273501.553:59559): user pid=15578 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171273663.666:59560): avc: denied { search } for pid=15610 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171273663.666:59560): avc: denied { write } for pid=15610 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171273663.666:59560): avc: denied { add_name } for pid=15610 comm="pyzor" name="SaeyY-" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171273663.666:59560): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=15610 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171273663.667:59561): avc: denied { remove_name } for pid=15610 comm="pyzor" name="SaeyY-" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171273663.667:59561): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=15610 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171273668.752:59562): avc: denied { append } for pid=15606 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171273668.752:59562): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=15601 pid=15606 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171273801.886:59563): user pid=15624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171273801.886:59564): login pid=15624 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171273801.887:59565): user pid=15625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171273801.887:59566): login pid=15625 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171273801.892:59567): user pid=15624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171273801.892:59568): user pid=15624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171273801.895:59569): user pid=15625 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171273801.895:59570): user pid=15625 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171273801.913:59571): user pid=15624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171273801.914:59572): user pid=15624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171273963.312:59573): avc: denied { write } for pid=15653 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171273963.312:59573): avc: denied { add_name } for pid=15653 comm="procmail" name="_l0D.rjD0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171273963.312:59573): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=15650 pid=15653 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171273963.313:59574): avc: denied { remove_name } for pid=15653 comm="procmail" name="_l0D.rjD0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171273963.313:59574): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61c750 a2=7fffc88c51e0 a3=61b670 items=0 ppid=15650 pid=15653 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171274101.230:59575): user pid=15672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171274101.231:59576): login pid=15672 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171274101.235:59577): user pid=15672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171274101.235:59578): user pid=15672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171274401.565:59579): user pid=15706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171274401.566:59580): login pid=15706 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171274401.568:59581): user pid=15707 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171274401.568:59582): login pid=15707 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171274401.569:59583): user pid=15706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171274401.570:59584): user pid=15706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171274401.575:59585): user pid=15707 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171274401.575:59586): user pid=15707 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171274401.590:59587): user pid=15706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171274401.590:59588): user pid=15706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171274461.909:59589): user pid=15727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171274461.910:59590): login pid=15727 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171274461.913:59591): user pid=15727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171274461.913:59592): user pid=15727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171274462.828:59593): user pid=15727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171274462.828:59594): user pid=15727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171274540.153:59595): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171274540.153:59595): arch=c000003e syscall=2 success=yes exit=12 a0=33c6ff0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171274540.153:59596): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171274540.153:59596): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171274540.153:59596): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171274540.160:59597): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171274540.160:59597): arch=c000003e syscall=2 success=yes exit=9 a0=34dbc50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171274540.954:59598): avc: denied { getattr } for pid=15759 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171274540.954:59598): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff0d2c6270 a2=7fff0d2c6270 a3=6c6280 items=0 ppid=6550 pid=15759 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171274540.954:59598): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171274540.954:59599): avc: denied { read } for pid=15759 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171274540.954:59599): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=15759 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171274545.916:59600): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171274545.916:59600): arch=c000003e syscall=62 success=yes exit=0 a0=3d8f a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171274546.073:59601): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171274546.073:59601): arch=c000003e syscall=86 success=yes exit=0 a0=31355b0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171274546.073:59602): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171274546.073:59602): arch=c000003e syscall=87 success=yes exit=0 a0=31355b0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171274546.074:59603): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171274546.074:59603): arch=c000003e syscall=2 success=yes exit=9 a0=3279660 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171274701.837:59604): user pid=15784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171274701.837:59605): login pid=15784 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171274701.840:59606): user pid=15784 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171274701.841:59607): user pid=15784 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171275001.171:59608): user pid=15832 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171275001.172:59609): login pid=15832 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171275001.174:59610): user pid=15833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171275001.175:59611): login pid=15833 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171275001.176:59612): user pid=15832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171275001.176:59613): user pid=15832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171275001.189:59614): user pid=15833 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171275001.189:59615): user pid=15833 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171275001.197:59616): user pid=15832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171275001.197:59617): user pid=15832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171275038.487:59618): avc: denied { search } for pid=15856 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171275038.487:59618): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=15856 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171275038.488:59619): avc: denied { create } for pid=15856 comm="pyzor" name="cIDSgf" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171275038.488:59619): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=15856 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171275038.488:59620): avc: denied { getattr } for pid=15856 comm="pyzor" name="cIDSgf" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171275038.488:59620): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff94c590f0 a2=7fff94c590f0 a3=3 items=0 ppid=6550 pid=15856 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171275038.488:59620): path="/tmp/cIDSgf" >type=AVC msg=audit(1171275038.488:59621): avc: denied { write } for pid=15856 comm="pyzor" name="cIDSgf" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171275038.488:59621): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=6550 pid=15856 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171275038.488:59621): path="/tmp/cIDSgf" >type=AVC msg=audit(1171275038.489:59622): avc: denied { unlink } for pid=15856 comm="pyzor" name="cIDSgf" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171275038.489:59622): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=15856 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171275038.490:59623): avc: denied { read } for pid=15856 comm="pyzor" name="tmpsfhpiM" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171275038.490:59623): arch=c000003e syscall=0 success=yes exit=337 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=15856 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171275038.490:59623): path=2F746D702F746D7073666870694D202864656C6574656429 >type=AVC msg=audit(1171275043.472:59624): avc: denied { create } for pid=15851 comm="procmail" name="_r3D.j0D0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171275043.472:59624): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=15846 pid=15851 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171275043.473:59625): avc: denied { write } for pid=15851 comm="procmail" name="_r3D.j0D0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171275043.473:59625): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=15846 pid=15851 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171275043.473:59625): path="/home/dhighley/_r3D.j0D0FB.douglas" >type=AVC msg=audit(1171275043.473:59626): avc: denied { getattr } for pid=15851 comm="procmail" name="_r3D.j0D0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171275043.473:59626): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7ffff576a160 a2=7ffff576a160 a3=61a500 items=0 ppid=15846 pid=15851 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171275043.473:59626): path="/home/dhighley/_r3D.j0D0FB.douglas" >type=AVC msg=audit(1171275043.473:59627): avc: denied { link } for pid=15851 comm="procmail" name="_r3D.j0D0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171275043.473:59627): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7ffff576a080 a3=61a500 items=0 ppid=15846 pid=15851 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171275043.473:59628): avc: denied { unlink } for pid=15851 comm="procmail" name="_r3D.j0D0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171275043.473:59628): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7ffff576a080 a3=61a500 items=0 ppid=15846 pid=15851 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1171275190.336:59629): user pid=14722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171275190.337:59630): user pid=14722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171275301.343:59631): user pid=15880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171275301.343:59632): login pid=15880 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171275301.347:59633): user pid=15880 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171275301.347:59634): user pid=15880 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171275601.678:59635): user pid=15915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171275601.678:59636): login pid=15915 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171275601.681:59637): user pid=15916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171275601.681:59638): login pid=15916 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171275601.684:59639): user pid=15915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171275601.684:59640): user pid=15915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171275601.686:59641): user pid=15916 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171275601.686:59642): user pid=15916 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171275601.713:59643): user pid=15915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171275601.714:59644): user pid=15915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171275870.177:59645): avc: denied { search } for pid=15956 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171275870.177:59645): avc: denied { write } for pid=15956 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171275870.177:59645): avc: denied { add_name } for pid=15956 comm="pyzor" name="FOmVKw" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171275870.177:59645): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=15956 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171275870.177:59646): avc: denied { remove_name } for pid=15956 comm="pyzor" name="FOmVKw" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171275870.177:59646): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=15956 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171275901.014:59647): user pid=15962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171275901.015:59648): login pid=15962 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171275901.018:59649): user pid=15962 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171275901.018:59650): user pid=15962 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171276201.352:59651): user pid=16002 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171276201.353:59652): login pid=16002 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171276201.354:59653): user pid=16001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171276201.354:59654): login pid=16001 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171276201.356:59655): user pid=16002 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171276201.356:59656): user pid=16002 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171276201.365:59657): user pid=16001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171276201.365:59658): user pid=16001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171276201.383:59659): user pid=16001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171276201.384:59660): user pid=16001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171276218.596:59661): avc: denied { write } for pid=16020 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171276218.596:59661): avc: denied { add_name } for pid=16020 comm="procmail" name="_U6D.6GE0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171276218.596:59661): arch=c000003e syscall=2 success=yes exit=6 a0=61cb50 a1=c1 a2=124 a3=61cb50 items=0 ppid=16015 pid=16020 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171276218.596:59662): avc: denied { remove_name } for pid=16020 comm="procmail" name="_U6D.6GE0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171276218.596:59662): arch=c000003e syscall=87 success=yes exit=0 a0=61cb50 a1=61b520 a2=7fff36fd2770 a3=61cb50 items=0 ppid=16015 pid=16020 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171276218.597:59663): avc: denied { append } for pid=16020 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171276218.597:59663): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16015 pid=16020 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171276303.706:59664): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171276303.706:59664): arch=c000003e syscall=2 success=yes exit=9 a0=32c7090 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171276304.268:59665): avc: denied { getattr } for pid=16041 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171276304.268:59665): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff218bc860 a2=7fff218bc860 a3=6c6280 items=0 ppid=6550 pid=16041 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171276304.268:59665): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171276304.268:59666): avc: denied { read } for pid=16041 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171276304.268:59666): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=16041 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171276309.229:59667): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171276309.229:59667): arch=c000003e syscall=62 success=yes exit=0 a0=3ea9 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171276309.852:59668): avc: denied { ioctl } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171276309.852:59668): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171276309.852:59668): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.6550" >type=AVC msg=audit(1171276309.853:59669): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171276309.853:59669): arch=c000003e syscall=86 success=yes exit=0 a0=322c820 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171276309.853:59670): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171276309.853:59670): arch=c000003e syscall=87 success=yes exit=0 a0=322c820 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171276309.854:59671): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171276309.854:59671): arch=c000003e syscall=2 success=yes exit=9 a0=2db2bb0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171276309.867:59672): avc: denied { create } for pid=16037 comm="procmail" name="_l6D.VIE0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171276309.867:59672): arch=c000003e syscall=2 success=yes exit=6 a0=6220d0 a1=c1 a2=124 a3=6220d0 items=0 ppid=16034 pid=16037 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171276309.868:59673): avc: denied { write } for pid=16037 comm="procmail" name="_l6D.VIE0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171276309.868:59673): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=6220d0 items=0 ppid=16034 pid=16037 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171276309.868:59673): path="/home/dhighley/_l6D.VIE0FB.douglas" >type=AVC msg=audit(1171276309.868:59674): avc: denied { getattr } for pid=16037 comm="procmail" name="_l6D.VIE0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171276309.868:59674): arch=c000003e syscall=4 success=yes exit=0 a0=6220d0 a1=7fff59a0e400 a2=7fff59a0e400 a3=6220d0 items=0 ppid=16034 pid=16037 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171276309.868:59674): path="/home/dhighley/_l6D.VIE0FB.douglas" >type=AVC msg=audit(1171276309.868:59675): avc: denied { link } for pid=16037 comm="procmail" name="_l6D.VIE0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171276309.868:59675): arch=c000003e syscall=86 success=yes exit=0 a0=6220d0 a1=61b520 a2=7fff59a0e320 a3=6220d0 items=0 ppid=16034 pid=16037 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171276309.868:59676): avc: denied { unlink } for pid=16037 comm="procmail" name="_l6D.VIE0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171276309.868:59676): arch=c000003e syscall=87 success=yes exit=0 a0=6220d0 a1=61b520 a2=7fff59a0e320 a3=6220d0 items=0 ppid=16034 pid=16037 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171276370.458:59677): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171276370.458:59677): arch=c000003e syscall=2 success=yes exit=12 a0=33ec660 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171276501.694:59678): user pid=16068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171276501.695:59679): login pid=16068 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171276501.697:59680): user pid=16068 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171276501.697:59681): user pid=16068 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171276801.029:59682): user pid=16111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171276801.030:59683): login pid=16111 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171276801.030:59684): user pid=16112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171276801.031:59685): login pid=16112 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171276801.035:59686): user pid=16111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171276801.035:59687): user pid=16111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171276801.043:59688): user pid=16112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171276801.044:59689): user pid=16112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171276801.059:59690): user pid=16111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171276801.059:59691): user pid=16111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171277101.370:59692): user pid=16150 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171277101.370:59693): login pid=16150 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171277101.373:59694): user pid=16150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171277101.373:59695): user pid=16150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171277401.696:59696): user pid=16184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171277401.696:59697): login pid=16184 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171277401.699:59698): user pid=16185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171277401.699:59699): login pid=16185 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171277401.702:59700): user pid=16184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171277401.702:59701): user pid=16184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171277401.704:59702): user pid=16185 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171277401.704:59703): user pid=16185 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171277401.724:59704): user pid=16184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171277401.724:59705): user pid=16184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171277701.038:59706): user pid=16220 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171277701.038:59707): login pid=16220 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171277701.042:59708): user pid=16220 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171277701.042:59709): user pid=16220 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171278001.366:59710): user pid=16253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171278001.366:59711): login pid=16253 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171278001.368:59712): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171278001.368:59713): login pid=16254 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171278001.370:59714): user pid=16255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171278001.370:59715): login pid=16255 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171278001.370:59716): user pid=16253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171278001.371:59717): user pid=16253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171278001.379:59718): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171278001.380:59719): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171278001.381:59720): user pid=16255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171278001.388:59721): user pid=16255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171278001.402:59722): user pid=16253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171278001.402:59723): user pid=16253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171278061.711:59724): user pid=16274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171278061.711:59725): login pid=16274 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171278061.715:59726): user pid=16274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171278061.715:59727): user pid=16274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171278062.630:59728): user pid=16274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171278062.631:59729): user pid=16274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171278301.636:59730): user pid=16310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171278301.637:59731): login pid=16310 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171278301.640:59732): user pid=16310 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171278301.641:59733): user pid=16310 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171278601.959:59734): user pid=16357 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171278601.960:59735): login pid=16357 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171278601.962:59736): user pid=16358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171278601.962:59737): login pid=16358 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171278601.962:59738): user pid=16357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171278601.962:59739): user pid=16357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171278601.967:59740): user pid=16358 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171278601.968:59741): user pid=16358 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171278601.995:59742): user pid=16357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171278601.995:59743): user pid=16357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171278901.303:59744): user pid=16399 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171278901.303:59745): login pid=16399 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171278901.306:59746): user pid=16399 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171278901.306:59747): user pid=16399 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171279201.628:59748): user pid=16434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171279201.628:59749): login pid=16434 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171279201.630:59750): user pid=16435 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171279201.630:59751): login pid=16435 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171279201.632:59752): user pid=16434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171279201.632:59753): user pid=16434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171279201.635:59754): user pid=16435 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171279201.635:59755): user pid=16435 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171279201.654:59756): user pid=16434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171279201.655:59757): user pid=16434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171279230.945:59758): avc: denied { search } for pid=16457 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171279230.945:59758): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=16457 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171279230.946:59759): avc: denied { create } for pid=16457 comm="pyzor" name="zMGAaz" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171279230.946:59759): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=16457 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171279230.946:59760): avc: denied { getattr } for pid=16457 comm="pyzor" name="zMGAaz" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171279230.946:59760): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff1631de30 a2=7fff1631de30 a3=3 items=0 ppid=6550 pid=16457 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171279230.946:59760): path="/tmp/zMGAaz" >type=AVC msg=audit(1171279230.946:59761): avc: denied { write } for pid=16457 comm="pyzor" name="zMGAaz" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171279230.946:59761): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15834 items=0 ppid=6550 pid=16457 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171279230.946:59761): path="/tmp/zMGAaz" >type=AVC msg=audit(1171279230.946:59762): avc: denied { unlink } for pid=16457 comm="pyzor" name="zMGAaz" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171279230.946:59762): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=16457 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171279230.947:59763): avc: denied { read } for pid=16457 comm="pyzor" name="tmpWJr8Ee" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171279230.947:59763): arch=c000003e syscall=0 success=yes exit=3102 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=16457 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171279230.947:59763): path=2F746D702F746D70574A72384565202864656C6574656429 >type=AVC msg=audit(1171279236.412:59764): avc: denied { append } for pid=16453 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171279236.412:59764): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16448 pid=16453 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171279501.967:59765): user pid=16481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171279501.968:59766): login pid=16481 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171279501.970:59767): user pid=16481 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171279501.970:59768): user pid=16481 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171279801.303:59769): user pid=16520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171279801.303:59770): login pid=16520 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171279801.305:59771): user pid=16521 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171279801.305:59772): login pid=16521 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171279801.308:59773): user pid=16520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171279801.308:59774): user pid=16520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171279801.310:59775): user pid=16521 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171279801.310:59776): user pid=16521 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171279801.329:59777): user pid=16520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171279801.330:59778): user pid=16520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171279956.365:59779): avc: denied { search } for pid=16553 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171279956.365:59779): avc: denied { write } for pid=16553 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171279956.365:59779): avc: denied { add_name } for pid=16553 comm="pyzor" name="KZ0wvE" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171279956.365:59779): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=16553 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171279956.366:59780): avc: denied { remove_name } for pid=16553 comm="pyzor" name="KZ0wvE" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171279956.366:59780): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=16553 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171280101.636:59781): user pid=16566 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171280101.636:59782): login pid=16566 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171280101.640:59783): user pid=16566 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171280101.640:59784): user pid=16566 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171280401.960:59785): user pid=16598 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171280401.961:59786): login pid=16598 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171280401.963:59787): user pid=16599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171280401.963:59788): login pid=16599 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171280401.965:59789): user pid=16598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171280401.965:59790): user pid=16598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171280401.974:59791): user pid=16599 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171280401.974:59792): user pid=16599 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171280401.983:59793): user pid=16598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171280401.983:59794): user pid=16598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171280620.354:59795): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171280620.354:59795): arch=c000003e syscall=2 success=yes exit=9 a0=32ab460 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171280621.133:59796): avc: denied { getattr } for pid=16637 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171280621.133:59796): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff0291c8c0 a2=7fff0291c8c0 a3=6c6280 items=0 ppid=6550 pid=16637 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171280621.133:59796): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171280621.133:59797): avc: denied { read } for pid=16637 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171280621.133:59797): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=16637 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171280626.097:59798): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171280626.097:59798): arch=c000003e syscall=62 success=yes exit=0 a0=40fd a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171280626.114:59799): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171280626.114:59799): arch=c000003e syscall=2 success=yes exit=9 a0=31abcd0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171280626.124:59800): avc: denied { write } for pid=16633 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171280626.124:59800): avc: denied { add_name } for pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171280626.124:59800): avc: denied { create } for pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171280626.124:59800): arch=c000003e syscall=2 success=yes exit=6 a0=61c5f0 a1=c1 a2=124 a3=61c5f0 items=0 ppid=16630 pid=16633 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171280626.124:59801): avc: denied { write } for pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171280626.124:59801): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c5f0 items=0 ppid=16630 pid=16633 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171280626.124:59801): path="/home/dhighley/_5DE.yLF0FB.douglas" >type=AVC msg=audit(1171280626.125:59802): avc: denied { getattr } for pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171280626.125:59802): arch=c000003e syscall=4 success=yes exit=0 a0=61c5f0 a1=7fff7ec98690 a2=7fff7ec98690 a3=61c5f0 items=0 ppid=16630 pid=16633 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171280626.125:59802): path="/home/dhighley/_5DE.yLF0FB.douglas" >type=AVC msg=audit(1171280626.125:59803): avc: denied { link } for pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171280626.125:59803): arch=c000003e syscall=86 success=yes exit=0 a0=61c5f0 a1=61b510 a2=7fff7ec985b0 a3=61c5f0 items=0 ppid=16630 pid=16633 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171280626.125:59804): avc: denied { remove_name } for pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171280626.125:59804): avc: denied { unlink } for pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171280626.125:59804): arch=c000003e syscall=87 success=yes exit=0 a0=61c5f0 a1=61b510 a2=7fff7ec985b0 a3=61c5f0 items=0 ppid=16630 pid=16633 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171280701.297:59805): user pid=16644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171280701.297:59806): login pid=16644 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171280701.300:59807): user pid=16644 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171280701.300:59808): user pid=16644 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171281001.629:59809): user pid=16682 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171281001.629:59810): login pid=16682 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171281001.631:59811): user pid=16683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171281001.631:59812): login pid=16683 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171281001.632:59813): user pid=16682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171281001.632:59814): user pid=16682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171281001.636:59815): user pid=16683 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171281001.636:59816): user pid=16683 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171281001.655:59817): user pid=16682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171281001.655:59818): user pid=16682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171281078.247:59819): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171281078.247:59819): arch=c000003e syscall=2 success=yes exit=12 a0=3228ad0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171281078.247:59820): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171281078.247:59820): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171281078.247:59820): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171281081.093:59821): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171281081.093:59821): arch=c000003e syscall=86 success=yes exit=0 a0=31dc9e0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171281081.093:59822): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171281081.093:59822): arch=c000003e syscall=87 success=yes exit=0 a0=31dc9e0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171281301.966:59823): user pid=16731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171281301.967:59824): login pid=16731 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171281301.971:59825): user pid=16731 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171281301.971:59826): user pid=16731 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171281601.293:59827): user pid=16768 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171281601.293:59828): login pid=16768 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171281601.293:59829): user pid=16769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171281601.293:59830): login pid=16769 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171281601.298:59831): user pid=16768 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171281601.298:59832): user pid=16768 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171281601.303:59833): user pid=16769 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171281601.303:59834): user pid=16769 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171281601.317:59835): user pid=16768 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171281601.317:59836): user pid=16768 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171281661.623:59837): user pid=16784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171281661.623:59838): login pid=16784 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171281661.626:59839): user pid=16784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171281661.626:59840): user pid=16784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171281662.510:59841): user pid=16784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171281662.511:59842): user pid=16784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171281721.514:59843): user pid=16805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171281721.514:59844): login pid=16805 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171281721.517:59845): user pid=16805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171281721.517:59846): user pid=16805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171281761.269:59847): avc: denied { search } for pid=16832 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171281761.269:59847): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=16832 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171281901.518:59848): user pid=16845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171281901.518:59849): login pid=16845 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171281901.522:59850): user pid=16845 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171281901.522:59851): user pid=16845 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171282087.256:59852): avc: denied { create } for pid=16887 comm="pyzor" name="ompev2" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171282087.256:59852): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=16887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171282087.256:59853): avc: denied { getattr } for pid=16887 comm="pyzor" name="ompev2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171282087.256:59853): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffffc2f8ba0 a2=7ffffc2f8ba0 a3=2 items=0 ppid=6550 pid=16887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171282087.256:59853): path="/tmp/ompev2" >type=AVC msg=audit(1171282087.256:59854): avc: denied { write } for pid=16887 comm="pyzor" name="ompev2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171282087.256:59854): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=6550 pid=16887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171282087.256:59854): path="/tmp/ompev2" >type=AVC msg=audit(1171282087.257:59855): avc: denied { unlink } for pid=16887 comm="pyzor" name="ompev2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171282087.257:59855): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=16887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171282087.264:59856): avc: denied { read } for pid=16887 comm="pyzor" name="tmpXzzcPW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171282087.264:59856): arch=c000003e syscall=0 success=yes exit=1670 a0=4 a1=2aaaaf34d000 a2=1000 a3=d7 items=0 ppid=6550 pid=16887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171282087.264:59856): path=2F746D702F746D70587A7A635057202864656C6574656429 >type=AVC msg=audit(1171282091.727:59857): avc: denied { search } for pid=16896 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171282091.727:59857): avc: denied { write } for pid=16896 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171282091.727:59857): avc: denied { add_name } for pid=16896 comm="pyzor" name="31mDq7" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171282091.727:59857): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=16896 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171282091.728:59858): avc: denied { remove_name } for pid=16896 comm="pyzor" name="31mDq7" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171282091.728:59858): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=16896 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171282092.592:59859): avc: denied { append } for pid=16883 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171282092.592:59859): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16878 pid=16883 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171282201.848:59860): user pid=16908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171282201.848:59861): login pid=16908 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171282201.850:59862): user pid=16909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171282201.850:59863): login pid=16909 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171282201.850:59864): user pid=16908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171282201.851:59865): user pid=16908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171282201.855:59866): user pid=16909 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171282201.855:59867): user pid=16909 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171282201.872:59868): user pid=16908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171282201.872:59869): user pid=16908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171282501.194:59870): user pid=16953 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171282501.195:59871): login pid=16953 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171282501.199:59872): user pid=16953 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171282501.199:59873): user pid=16953 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171282541.086:59874): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171282541.086:59874): arch=c000003e syscall=62 success=yes exit=0 a0=424e a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171282541.113:59875): avc: denied { write } for pid=16970 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171282541.113:59875): avc: denied { add_name } for pid=16970 comm="procmail" name="_KJE.tpF0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171282541.113:59875): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=16965 pid=16970 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171282541.114:59876): avc: denied { remove_name } for pid=16970 comm="procmail" name="_KJE.tpF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171282541.114:59876): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61fe90 a2=7fffd94b0dd0 a3=61b650 items=0 ppid=16965 pid=16970 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171282799.338:59877): avc: denied { write } for pid=6550 comm="spamd" name="bayes_toks" dev=dm-0 ino=12485684 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171282799.338:59877): arch=c000003e syscall=2 success=yes exit=11 a0=2fd2360 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171282799.339:59878): avc: denied { setattr } for pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282799.339:59878): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171282799.339:59879): avc: denied { rename } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282799.339:59879): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171282799.570:59880): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=12487199 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171282799.570:59880): arch=c000003e syscall=2 success=yes exit=9 a0=3216810 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171282800.274:59881): avc: denied { getattr } for pid=17007 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282800.274:59881): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff466295d0 a2=7fff466295d0 a3=6c6280 items=0 ppid=6550 pid=17007 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171282800.274:59881): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171282800.274:59882): avc: denied { read } for pid=17007 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282800.274:59882): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=17007 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171282801.525:59883): user pid=17008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171282801.525:59884): login pid=17008 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171282801.527:59885): user pid=17009 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171282801.528:59886): login pid=17009 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171282801.529:59887): user pid=17008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171282801.530:59888): user pid=17008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171282801.540:59889): user pid=17009 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171282801.540:59890): user pid=17009 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171282801.560:59891): user pid=17008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171282801.561:59892): user pid=17008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171282805.459:59893): avc: denied { ioctl } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282805.459:59893): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171282805.459:59893): path="/home/phighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.6550" >type=AVC msg=audit(1171282805.459:59894): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282805.459:59894): arch=c000003e syscall=86 success=yes exit=0 a0=32bd110 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171282805.459:59895): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282805.459:59895): arch=c000003e syscall=87 success=yes exit=0 a0=32bd110 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171282805.475:59896): avc: denied { create } for pid=17003 comm="procmail" name="_rJE.1tF0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282805.475:59896): arch=c000003e syscall=2 success=yes exit=6 a0=61cc60 a1=c1 a2=124 a3=61cc60 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171282805.476:59897): avc: denied { write } for pid=17003 comm="procmail" name="_rJE.1tF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282805.476:59897): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cc60 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171282805.476:59897): path="/home/phighley/_rJE.1tF0FB.douglas" >type=AVC msg=audit(1171282805.476:59898): avc: denied { getattr } for pid=17003 comm="procmail" name="_rJE.1tF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282805.476:59898): arch=c000003e syscall=4 success=yes exit=0 a0=61cc60 a1=7fff33f85970 a2=7fff33f85970 a3=61cc60 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171282805.476:59898): path="/home/phighley/_rJE.1tF0FB.douglas" >type=AVC msg=audit(1171282805.476:59899): avc: denied { link } for pid=17003 comm="procmail" name="_rJE.1tF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282805.476:59899): arch=c000003e syscall=86 success=yes exit=0 a0=61cc60 a1=61b520 a2=7fff33f85890 a3=61cc60 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171282805.476:59900): avc: denied { unlink } for pid=17003 comm="procmail" name="_rJE.1tF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282805.476:59900): arch=c000003e syscall=87 success=yes exit=0 a0=61cc60 a1=61b520 a2=7fff33f85890 a3=61cc60 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171282805.476:59901): avc: denied { append } for pid=17003 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282805.476:59901): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171282805.476:59902): avc: denied { lock } for pid=17003 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171282805.476:59902): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171282805.476:59902): path="/home/phighley/spamlog" >type=USER_ACCT msg=audit(1171283101.867:59903): user pid=17049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171283101.867:59904): login pid=17049 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171283101.871:59905): user pid=17049 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171283101.871:59906): user pid=17049 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171283401.193:59907): user pid=17087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171283401.194:59908): login pid=17087 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171283401.195:59909): user pid=17086 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171283401.195:59910): login pid=17086 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171283401.198:59911): user pid=17086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171283401.198:59912): user pid=17086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171283401.200:59913): user pid=17087 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171283401.200:59914): user pid=17087 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171283401.227:59915): user pid=17086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171283401.227:59916): user pid=17086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171283654.207:59917): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171283654.207:59917): arch=c000003e syscall=2 success=yes exit=12 a0=33298e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171283658.925:59918): avc: denied { getattr } for pid=17129 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171283658.925:59918): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffff5f87f30 a2=7ffff5f87f30 a3=6c6280 items=0 ppid=6550 pid=17129 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171283658.925:59918): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171283658.925:59919): avc: denied { read } for pid=17129 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171283658.925:59919): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=17129 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171283701.524:59920): user pid=17134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171283701.524:59921): login pid=17134 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171283701.528:59922): user pid=17134 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171283701.528:59923): user pid=17134 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171283911.819:59924): avc: denied { search } for pid=17167 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171283911.819:59924): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=17167 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171283971.202:59925): avc: denied { setattr } for pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171283971.202:59925): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171283971.202:59926): avc: denied { rename } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171283971.202:59926): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171283972.728:59927): avc: denied { create } for pid=17188 comm="pyzor" name="cvYL4P" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171283972.728:59927): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=17188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171283972.728:59928): avc: denied { getattr } for pid=17188 comm="pyzor" name="cvYL4P" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171283972.728:59928): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcc478910 a2=7fffcc478910 a3=3 items=0 ppid=6550 pid=17188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171283972.728:59928): path="/tmp/cvYL4P" >type=AVC msg=audit(1171283972.728:59929): avc: denied { write } for pid=17188 comm="pyzor" name="cvYL4P" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171283972.728:59929): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=17188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171283972.728:59929): path="/tmp/cvYL4P" >type=AVC msg=audit(1171283972.728:59930): avc: denied { unlink } for pid=17188 comm="pyzor" name="cvYL4P" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171283972.728:59930): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=17188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171283972.729:59931): avc: denied { read } for pid=17188 comm="pyzor" name="tmpZ-iGOd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171283972.729:59931): arch=c000003e syscall=0 success=yes exit=402 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=17188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171283972.729:59931): path=2F746D702F746D705A2D69474F64202864656C6574656429 >type=AVC msg=audit(1171283977.909:59932): avc: denied { append } for pid=17184 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171283977.909:59932): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=17179 pid=17184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171284001.862:59933): user pid=17196 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171284001.863:59934): login pid=17196 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171284001.865:59935): user pid=17197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171284001.865:59936): login pid=17197 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171284001.865:59937): user pid=17196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171284001.865:59938): user pid=17196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171284001.871:59939): user pid=17197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171284001.871:59940): user pid=17197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171284001.896:59941): user pid=17196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171284001.897:59942): user pid=17196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171284301.195:59943): user pid=17236 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171284301.195:59944): login pid=17236 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171284301.198:59945): user pid=17236 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171284301.198:59946): user pid=17236 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171284601.523:59947): user pid=17271 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171284601.524:59948): login pid=17271 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171284601.526:59949): user pid=17272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171284601.526:59950): login pid=17272 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171284601.528:59951): user pid=17271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171284601.528:59952): user pid=17271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171284601.532:59953): user pid=17272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171284601.532:59954): user pid=17272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171284601.548:59955): user pid=17271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171284601.549:59956): user pid=17271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171284901.866:59957): user pid=17307 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171284901.867:59958): login pid=17307 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171284901.871:59959): user pid=17307 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171284901.871:59960): user pid=17307 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171285093.161:59961): user pid=16805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171285093.162:59962): user pid=16805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171285201.169:59963): user pid=17946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171285201.169:59964): login pid=17946 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171285201.171:59965): user pid=17947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171285201.172:59966): login pid=17947 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171285201.172:59967): user pid=17946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171285201.172:59968): user pid=17946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171285201.179:59969): user pid=17947 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171285201.179:59970): user pid=17947 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171285201.197:59971): user pid=17946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171285201.197:59972): user pid=17946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171285261.510:59973): user pid=17965 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171285261.511:59974): login pid=17965 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171285261.514:59975): user pid=17965 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171285261.514:59976): user pid=17965 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171285262.428:59977): user pid=17965 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171285262.428:59978): user pid=17965 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171285501.435:59979): user pid=18010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171285501.435:59980): login pid=18010 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171285501.439:59981): user pid=18010 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171285501.439:59982): user pid=18010 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171285801.766:59983): user pid=18055 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171285801.766:59984): login pid=18055 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171285801.767:59985): user pid=18056 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171285801.767:59986): login pid=18056 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171285801.769:59987): user pid=18055 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171285801.769:59988): user pid=18055 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171285801.779:59989): user pid=18056 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171285801.779:59990): user pid=18056 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171285801.788:59991): user pid=18055 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171285801.788:59992): user pid=18055 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171286038.536:59993): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171286038.536:59994): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171286101.541:59995): user pid=18095 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171286101.541:59996): login pid=18095 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171286101.544:59997): user pid=18095 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171286101.544:59998): user pid=18095 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171286401.866:59999): user pid=18131 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171286401.866:60000): login pid=18131 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171286401.868:60001): user pid=18132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171286401.869:60002): login pid=18132 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171286401.869:60003): user pid=18131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171286401.869:60004): user pid=18131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171286401.877:60005): user pid=18132 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171286401.878:60006): user pid=18132 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171286401.887:60007): user pid=18131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171286401.887:60008): user pid=18131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171286701.207:60009): user pid=18167 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171286701.207:60010): login pid=18167 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171286701.210:60011): user pid=18167 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171286701.210:60012): user pid=18167 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171287001.530:60013): user pid=18204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171287001.530:60014): login pid=18204 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171287001.532:60015): user pid=18205 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171287001.532:60016): login pid=18205 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171287001.537:60017): user pid=18204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171287001.537:60018): user pid=18204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171287001.540:60019): user pid=18205 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171287001.540:60020): user pid=18205 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171287001.554:60021): user pid=18204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171287001.554:60022): user pid=18204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171287301.864:60023): user pid=18243 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171287301.865:60024): login pid=18243 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171287301.867:60025): user pid=18243 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171287301.867:60026): user pid=18243 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171287601.200:60027): user pid=18275 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171287601.200:60028): login pid=18275 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171287601.202:60029): user pid=18276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171287601.202:60030): login pid=18276 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171287601.204:60031): user pid=18275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171287601.204:60032): user pid=18275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171287601.207:60033): user pid=18276 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171287601.207:60034): user pid=18276 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171287601.224:60035): user pid=18275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171287601.224:60036): user pid=18275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171287884.273:60037): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171287884.273:60037): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171287884.273:60037): path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.6550" >type=AVC msg=audit(1171287884.274:60038): avc: denied { link } for pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171287884.274:60038): arch=c000003e syscall=86 success=yes exit=0 a0=347a410 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171287884.274:60039): avc: denied { unlink } for pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171287884.274:60039): arch=c000003e syscall=87 success=yes exit=0 a0=347a410 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171287884.275:60040): avc: denied { write } for pid=6550 comm="spamd" name="bayes_seen" dev=dm-0 ino=15630939 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171287884.275:60040): arch=c000003e syscall=2 success=yes exit=9 a0=2daa4c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171287884.276:60041): avc: denied { setattr } for pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171287884.276:60041): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171287884.276:60042): avc: denied { rename } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171287884.276:60042): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171287890.663:60043): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171287890.663:60043): arch=c000003e syscall=1 success=yes exit=1296 a0=b a1=32eb4c0 a2=510 a3=11 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171287890.663:60043): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171287890.674:60044): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171287890.674:60044): arch=c000003e syscall=2 success=yes exit=9 a0=32679d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171287892.154:60045): avc: denied { search } for pid=18323 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171287892.154:60045): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171287892.154:60046): avc: denied { getattr } for pid=18323 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171287892.154:60046): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff30f6af10 a2=7fff30f6af10 a3=6c6280 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171287892.154:60046): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171287892.154:60047): avc: denied { read } for pid=18323 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171287892.154:60047): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171287892.155:60048): avc: denied { search } for pid=18323 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171287892.155:60048): avc: denied { write } for pid=18323 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171287892.155:60048): avc: denied { add_name } for pid=18323 comm="pyzor" name="GjKn7w" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171287892.155:60048): avc: denied { create } for pid=18323 comm="pyzor" name="GjKn7w" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171287892.155:60048): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171287892.155:60049): avc: denied { getattr } for pid=18323 comm="pyzor" name="GjKn7w" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171287892.155:60049): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff30f69400 a2=7fff30f69400 a3=3 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171287892.155:60049): path="/tmp/GjKn7w" >type=AVC msg=audit(1171287892.155:60050): avc: denied { write } for pid=18323 comm="pyzor" name="GjKn7w" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171287892.155:60050): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171287892.155:60050): path="/tmp/GjKn7w" >type=AVC msg=audit(1171287892.155:60051): avc: denied { remove_name } for pid=18323 comm="pyzor" name="GjKn7w" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171287892.155:60051): avc: denied { unlink } for pid=18323 comm="pyzor" name="GjKn7w" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171287892.155:60051): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171287892.156:60052): avc: denied { read } for pid=18323 comm="pyzor" name="tmpuF2mXB" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171287892.156:60052): arch=c000003e syscall=0 success=yes exit=377 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171287892.156:60052): path=2F746D702F746D707546326D5842202864656C6574656429 >type=AVC msg=audit(1171287897.115:60053): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171287897.115:60053): arch=c000003e syscall=62 success=yes exit=0 a0=4793 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171287897.137:60054): avc: denied { write } for pid=18314 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171287897.137:60054): avc: denied { add_name } for pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171287897.137:60054): avc: denied { create } for pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171287897.137:60054): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=18309 pid=18314 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171287897.137:60055): avc: denied { write } for pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171287897.137:60055): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=18309 pid=18314 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171287897.137:60055): path="/home/dhighley/_KeE.Z9G0FB.douglas" >type=AVC msg=audit(1171287897.138:60056): avc: denied { getattr } for pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171287897.138:60056): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7fffc4b57550 a2=7fffc4b57550 a3=61a500 items=0 ppid=18309 pid=18314 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171287897.138:60056): path="/home/dhighley/_KeE.Z9G0FB.douglas" >type=AVC msg=audit(1171287897.138:60057): avc: denied { link } for pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171287897.138:60057): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffc4b57470 a3=61a500 items=0 ppid=18309 pid=18314 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171287897.138:60058): avc: denied { remove_name } for pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171287897.138:60058): avc: denied { unlink } for pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171287897.138:60058): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffc4b57470 a3=61a500 items=0 ppid=18309 pid=18314 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171287897.138:60059): avc: denied { append } for pid=18314 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171287897.138:60059): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=18309 pid=18314 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171287901.540:60060): user pid=18324 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171287901.541:60061): login pid=18324 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171287901.544:60062): user pid=18324 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171287901.544:60063): user pid=18324 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171288201.869:60064): user pid=18357 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171288201.869:60065): login pid=18357 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171288201.870:60066): user pid=18358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171288201.870:60067): login pid=18358 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171288201.875:60068): user pid=18357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171288201.875:60069): user pid=18357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171288201.879:60070): user pid=18358 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171288201.879:60071): user pid=18358 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171288201.899:60072): user pid=18357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171288201.899:60073): user pid=18357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171288394.298:60074): avc: denied { search } for pid=18396 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171288394.298:60074): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=18396 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171288394.299:60075): avc: denied { create } for pid=18396 comm="pyzor" name="6TdHrg" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171288394.299:60075): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=18396 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171288394.299:60076): avc: denied { getattr } for pid=18396 comm="pyzor" name="6TdHrg" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171288394.299:60076): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff6c7534f0 a2=7fff6c7534f0 a3=3 items=0 ppid=6550 pid=18396 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171288394.299:60076): path="/tmp/6TdHrg" >type=AVC msg=audit(1171288394.299:60077): avc: denied { write } for pid=18396 comm="pyzor" name="6TdHrg" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171288394.299:60077): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15834 items=0 ppid=6550 pid=18396 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171288394.299:60077): path="/tmp/6TdHrg" >type=AVC msg=audit(1171288394.299:60078): avc: denied { unlink } for pid=18396 comm="pyzor" name="6TdHrg" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171288394.299:60078): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=18396 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171288394.301:60079): avc: denied { read } for pid=18396 comm="pyzor" name="tmpR09y6_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171288394.301:60079): arch=c000003e syscall=0 success=yes exit=3295 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=18396 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171288394.301:60079): path=2F746D702F746D7052303979365F202864656C6574656429 >type=USER_ACCT msg=audit(1171288501.222:60080): user pid=18406 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171288501.222:60081): login pid=18406 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171288501.226:60082): user pid=18406 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171288501.226:60083): user pid=18406 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171288548.680:60084): avc: denied { append } for pid=18422 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171288548.680:60084): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=3 items=0 ppid=18419 pid=18422 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171288801.549:60085): user pid=18448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171288801.549:60086): login pid=18448 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171288801.551:60087): user pid=18449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171288801.551:60088): login pid=18449 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171288801.553:60089): user pid=18450 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171288801.553:60090): login pid=18450 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171288801.553:60091): user pid=18448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171288801.553:60092): user pid=18448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171288801.558:60093): user pid=18450 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171288801.558:60094): user pid=18450 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171288801.560:60095): user pid=18449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171288801.560:60096): user pid=18449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171288801.580:60097): user pid=18448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171288801.580:60098): user pid=18448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171288861.897:60099): user pid=18471 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171288861.897:60100): login pid=18471 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171288861.900:60101): user pid=18471 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171288861.900:60102): user pid=18471 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171288862.784:60103): user pid=18471 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171288862.785:60104): user pid=18471 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171289101.792:60105): user pid=18511 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171289101.793:60106): login pid=18511 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171289101.796:60107): user pid=18511 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171289101.796:60108): user pid=18511 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171289312.975:60109): avc: denied { search } for pid=18550 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171289312.975:60109): avc: denied { write } for pid=18550 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171289312.975:60109): avc: denied { add_name } for pid=18550 comm="pyzor" name="tUG1iz" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171289312.975:60109): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=18550 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171289312.975:60110): avc: denied { remove_name } for pid=18550 comm="pyzor" name="tUG1iz" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171289312.975:60110): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=18550 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171289315.226:60111): avc: denied { write } for pid=18545 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171289315.226:60111): avc: denied { add_name } for pid=18545 comm="procmail" name="_xhE.jTH0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171289315.226:60111): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=18540 pid=18545 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171289315.227:60112): avc: denied { remove_name } for pid=18545 comm="procmail" name="_xhE.jTH0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171289315.227:60112): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffbafb98c0 a3=61a500 items=0 ppid=18540 pid=18545 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171289401.132:60113): user pid=18560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171289401.132:60114): login pid=18560 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171289401.132:60115): user pid=18561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171289401.132:60116): login pid=18561 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171289401.137:60117): user pid=18560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171289401.137:60118): user pid=18560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171289401.138:60119): user pid=18561 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171289401.138:60120): user pid=18561 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171289401.161:60121): user pid=18560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171289401.162:60122): user pid=18560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171289701.467:60123): user pid=18601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171289701.467:60124): login pid=18601 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171289701.470:60125): user pid=18601 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171289701.470:60126): user pid=18601 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171290001.789:60127): user pid=18636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171290001.789:60128): login pid=18636 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171290001.792:60129): user pid=18637 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171290001.792:60130): login pid=18637 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171290001.795:60131): user pid=18636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171290001.795:60132): user pid=18636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171290001.797:60133): user pid=18637 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171290001.797:60134): user pid=18637 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171290001.825:60135): user pid=18636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171290001.825:60136): user pid=18636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171290185.483:60137): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171290185.483:60137): arch=c000003e syscall=2 success=yes exit=12 a0=3556f40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171290185.483:60138): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171290185.483:60138): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171290185.483:60138): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171290185.501:60139): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171290185.501:60139): arch=c000003e syscall=2 success=yes exit=9 a0=32d9530 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171290186.188:60140): avc: denied { getattr } for pid=18673 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171290186.188:60140): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff1e22a1d0 a2=7fff1e22a1d0 a3=6c6280 items=0 ppid=6550 pid=18673 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171290186.188:60140): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171290186.188:60141): avc: denied { read } for pid=18673 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171290186.188:60141): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=18673 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171290191.150:60142): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171290191.150:60142): arch=c000003e syscall=62 success=yes exit=0 a0=48f1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171290191.248:60143): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171290191.248:60143): arch=c000003e syscall=86 success=yes exit=0 a0=3449720 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171290191.248:60144): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171290191.248:60144): arch=c000003e syscall=87 success=yes exit=0 a0=3449720 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171290191.249:60145): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171290191.249:60145): arch=c000003e syscall=2 success=yes exit=9 a0=354e750 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171290191.260:60146): avc: denied { create } for pid=18669 comm="procmail" name="_tjE.PhH0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171290191.260:60146): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=18664 pid=18669 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171290191.260:60147): avc: denied { write } for pid=18669 comm="procmail" name="_tjE.PhH0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171290191.260:60147): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=18664 pid=18669 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171290191.260:60147): path="/home/dhighley/_tjE.PhH0FB.douglas" >type=AVC msg=audit(1171290191.260:60148): avc: denied { getattr } for pid=18669 comm="procmail" name="_tjE.PhH0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171290191.260:60148): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff6d689080 a2=7fff6d689080 a3=61b650 items=0 ppid=18664 pid=18669 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171290191.260:60148): path="/home/dhighley/_tjE.PhH0FB.douglas" >type=AVC msg=audit(1171290191.261:60149): avc: denied { link } for pid=18669 comm="procmail" name="_tjE.PhH0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171290191.261:60149): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61ec20 a2=7fff6d688fa0 a3=61b650 items=0 ppid=18664 pid=18669 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171290191.261:60150): avc: denied { unlink } for pid=18669 comm="procmail" name="_tjE.PhH0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171290191.261:60150): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61ec20 a2=7fff6d688fa0 a3=61b650 items=0 ppid=18664 pid=18669 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171290301.133:60151): user pid=18703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171290301.133:60152): login pid=18703 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171290301.137:60153): user pid=18703 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171290301.137:60154): user pid=18703 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171290601.476:60155): user pid=18738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171290601.477:60156): login pid=18738 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171290601.479:60157): user pid=18739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171290601.479:60158): login pid=18739 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171290601.480:60159): user pid=18738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171290601.480:60160): user pid=18738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171290601.483:60161): user pid=18739 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171290601.484:60162): user pid=18739 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171290601.501:60163): user pid=18738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171290601.501:60164): user pid=18738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171290901.816:60165): user pid=18775 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171290901.816:60166): login pid=18775 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171290901.819:60167): user pid=18775 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171290901.819:60168): user pid=18775 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171291201.139:60169): user pid=18811 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171291201.140:60170): login pid=18811 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171291201.142:60171): user pid=18812 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171291201.142:60172): login pid=18812 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171291201.145:60173): user pid=18811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171291201.146:60174): user pid=18811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171291201.147:60175): user pid=18812 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171291201.148:60176): user pid=18812 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171291201.168:60177): user pid=18811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171291201.169:60178): user pid=18811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171291501.479:60179): user pid=18848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171291501.480:60180): login pid=18848 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171291501.484:60181): user pid=18848 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171291501.484:60182): user pid=18848 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171291555.253:60183): avc: denied { search } for pid=18871 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171291555.253:60183): avc: denied { write } for pid=18871 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171291555.253:60183): avc: denied { add_name } for pid=18871 comm="pyzor" name="9yWH5X" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171291555.253:60183): avc: denied { create } for pid=18871 comm="pyzor" name="9yWH5X" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171291555.253:60183): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=18871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171291555.254:60184): avc: denied { getattr } for pid=18871 comm="pyzor" name="9yWH5X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171291555.254:60184): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff84ccafe0 a2=7fff84ccafe0 a3=3 items=0 ppid=6550 pid=18871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171291555.254:60184): path="/tmp/9yWH5X" >type=AVC msg=audit(1171291555.254:60185): avc: denied { write } for pid=18871 comm="pyzor" name="9yWH5X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171291555.254:60185): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=18871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171291555.254:60185): path="/tmp/9yWH5X" >type=AVC msg=audit(1171291555.254:60186): avc: denied { remove_name } for pid=18871 comm="pyzor" name="9yWH5X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171291555.254:60186): avc: denied { unlink } for pid=18871 comm="pyzor" name="9yWH5X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171291555.254:60186): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=18871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171291555.255:60187): avc: denied { read } for pid=18871 comm="pyzor" name="tmpxUeE-M" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171291555.255:60187): arch=c000003e syscall=0 success=yes exit=711 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=18871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171291555.255:60187): path=2F746D702F746D70785565452D4D202864656C6574656429 >type=AVC msg=audit(1171291560.433:60188): avc: denied { append } for pid=18867 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171291560.433:60188): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=18862 pid=18867 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171291801.809:60189): user pid=18901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171291801.809:60190): login pid=18901 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171291801.812:60191): user pid=18902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171291801.812:60192): login pid=18902 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171291801.814:60193): user pid=18901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171291801.814:60194): user pid=18901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171291801.820:60195): user pid=18902 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171291801.820:60196): user pid=18902 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171291801.836:60197): user pid=18901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171291801.836:60198): user pid=18901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171291926.710:60199): user pid=18926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171291926.710:60200): user pid=18926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171291926.720:60201): user pid=18926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171291926.721:60202): login pid=18926 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171291926.722:60203): user pid=18926 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171291926.779:60204): user pid=18929 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)' >type=CRED_REFR msg=audit(1171291926.790:60205): user pid=18929 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1171291936.880:60206): user pid=18926 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171291936.880:60207): user pid=18926 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171291986.839:60208): user pid=18981 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171291986.842:60209): user pid=18981 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171291986.843:60210): login pid=18981 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171291986.843:60211): user pid=18981 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1171291986.852:60212): user pid=18986 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171291986.952:60213): user pid=18981 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)' >type=CRED_DISP msg=audit(1171292084.325:60214): user pid=18981 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171292084.325:60215): user pid=18981 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171292101.149:60216): user pid=19039 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171292101.149:60217): login pid=19039 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171292101.152:60218): user pid=19039 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171292101.152:60219): user pid=19039 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171292222.491:60220): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171292222.491:60220): arch=c000003e syscall=2 success=yes exit=12 a0=34bcd90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171292222.492:60221): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171292222.492:60221): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171292222.492:60221): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171292222.504:60222): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171292222.504:60222): arch=c000003e syscall=2 success=yes exit=9 a0=34b4290 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171292223.195:60223): avc: denied { search } for pid=19065 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171292223.195:60223): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171292223.195:60224): avc: denied { getattr } for pid=19065 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171292223.195:60224): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff067b9760 a2=7fff067b9760 a3=6c6280 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171292223.195:60224): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171292223.195:60225): avc: denied { read } for pid=19065 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171292223.195:60225): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171292223.196:60226): avc: denied { search } for pid=19065 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171292223.196:60226): avc: denied { write } for pid=19065 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171292223.196:60226): avc: denied { add_name } for pid=19065 comm="pyzor" name="bVswva" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171292223.196:60226): avc: denied { create } for pid=19065 comm="pyzor" name="bVswva" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171292223.196:60226): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171292223.196:60227): avc: denied { getattr } for pid=19065 comm="pyzor" name="bVswva" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171292223.196:60227): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff067b7c50 a2=7fff067b7c50 a3=3 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171292223.196:60227): path="/tmp/bVswva" >type=AVC msg=audit(1171292223.196:60228): avc: denied { write } for pid=19065 comm="pyzor" name="bVswva" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171292223.196:60228): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171292223.196:60228): path="/tmp/bVswva" >type=AVC msg=audit(1171292223.196:60229): avc: denied { remove_name } for pid=19065 comm="pyzor" name="bVswva" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171292223.196:60229): avc: denied { unlink } for pid=19065 comm="pyzor" name="bVswva" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171292223.196:60229): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171292223.197:60230): avc: denied { read } for pid=19065 comm="pyzor" name="tmp6vjNiD" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171292223.197:60230): arch=c000003e syscall=0 success=yes exit=2426 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171292223.197:60230): path=2F746D702F746D7036766A4E6944202864656C6574656429 >type=AVC msg=audit(1171292228.158:60231): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171292228.158:60231): arch=c000003e syscall=62 success=yes exit=0 a0=4a79 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171292228.171:60232): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171292228.171:60232): arch=c000003e syscall=86 success=yes exit=0 a0=31fd950 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171292228.171:60233): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171292228.171:60233): arch=c000003e syscall=87 success=yes exit=0 a0=31fd950 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171292228.172:60234): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171292228.172:60234): arch=c000003e syscall=2 success=yes exit=9 a0=34b6b60 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171292228.182:60235): avc: denied { write } for pid=19061 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171292228.182:60235): avc: denied { add_name } for pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171292228.182:60235): avc: denied { create } for pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171292228.182:60235): arch=c000003e syscall=2 success=yes exit=6 a0=620830 a1=c1 a2=124 a3=620830 items=0 ppid=19058 pid=19061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171292228.183:60236): avc: denied { write } for pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171292228.183:60236): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=620830 items=0 ppid=19058 pid=19061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171292228.183:60236): path="/home/dhighley/_1pE.EBI0FB.douglas" >type=AVC msg=audit(1171292228.183:60237): avc: denied { getattr } for pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171292228.183:60237): arch=c000003e syscall=4 success=yes exit=0 a0=620830 a1=7fff66679070 a2=7fff66679070 a3=620830 items=0 ppid=19058 pid=19061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171292228.183:60237): path="/home/dhighley/_1pE.EBI0FB.douglas" >type=AVC msg=audit(1171292228.183:60238): avc: denied { link } for pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171292228.183:60238): arch=c000003e syscall=86 success=yes exit=0 a0=620830 a1=620a30 a2=7fff66678f90 a3=620830 items=0 ppid=19058 pid=19061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171292228.183:60239): avc: denied { remove_name } for pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171292228.183:60239): avc: denied { unlink } for pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171292228.183:60239): arch=c000003e syscall=87 success=yes exit=0 a0=620830 a1=620a30 a2=7fff66678f90 a3=620830 items=0 ppid=19058 pid=19061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171292228.183:60240): avc: denied { append } for pid=19061 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171292228.183:60240): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=19058 pid=19061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171292401.476:60241): user pid=19089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171292401.477:60242): login pid=19089 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171292401.479:60243): user pid=19090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171292401.479:60244): login pid=19090 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171292401.480:60245): user pid=19089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171292401.481:60246): user pid=19089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171292401.485:60247): user pid=19090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171292401.485:60248): user pid=19090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171292401.503:60249): user pid=19089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171292401.503:60250): user pid=19089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171292461.816:60251): user pid=19107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171292461.816:60252): login pid=19107 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171292461.819:60253): user pid=19107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171292461.819:60254): user pid=19107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171292462.705:60255): user pid=19107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171292462.706:60256): user pid=19107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171292701.712:60257): user pid=19151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171292701.712:60258): login pid=19151 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171292701.716:60259): user pid=19151 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171292701.716:60260): user pid=19151 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171292981.605:60261): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171292981.605:60261): arch=c000003e syscall=2 success=yes exit=12 a0=349b0c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171292981.605:60262): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171292981.605:60262): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171292981.605:60262): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171292981.610:60263): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171292981.610:60263): arch=c000003e syscall=2 success=yes exit=9 a0=32694e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171292986.657:60264): avc: denied { getattr } for pid=19191 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171292986.657:60264): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffff7f3fee0 a2=7ffff7f3fee0 a3=6c6280 items=0 ppid=6550 pid=19191 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171292986.657:60264): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171292986.657:60265): avc: denied { read } for pid=19191 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171292986.657:60265): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19191 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171292991.620:60266): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171292991.620:60266): arch=c000003e syscall=62 success=yes exit=0 a0=4af7 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171292991.627:60267): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171292991.627:60267): arch=c000003e syscall=86 success=yes exit=0 a0=33829f0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171292991.628:60268): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171292991.628:60268): arch=c000003e syscall=87 success=yes exit=0 a0=33829f0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171292991.628:60269): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171292991.628:60269): arch=c000003e syscall=2 success=yes exit=10 a0=33552b0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171293001.043:60270): user pid=19196 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171293001.043:60271): login pid=19196 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171293001.045:60272): user pid=19197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171293001.046:60273): login pid=19197 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171293001.047:60274): user pid=19196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171293001.048:60275): user pid=19196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171293001.053:60276): user pid=19197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171293001.053:60277): user pid=19197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171293001.067:60278): user pid=19196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171293001.068:60279): user pid=19196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171293301.384:60280): user pid=19235 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171293301.384:60281): login pid=19235 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171293301.388:60282): user pid=19235 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171293301.389:60283): user pid=19235 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171293428.418:60284): avc: denied { search } for pid=19260 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171293428.418:60284): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19260 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171293428.419:60285): avc: denied { create } for pid=19260 comm="pyzor" name="raFgWY" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171293428.419:60285): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=19260 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171293428.420:60286): avc: denied { getattr } for pid=19260 comm="pyzor" name="raFgWY" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171293428.420:60286): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff25bc9470 a2=7fff25bc9470 a3=2 items=0 ppid=6550 pid=19260 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171293428.420:60286): path="/tmp/raFgWY" >type=AVC msg=audit(1171293428.420:60287): avc: denied { write } for pid=19260 comm="pyzor" name="raFgWY" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171293428.420:60287): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=6550 pid=19260 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171293428.420:60287): path="/tmp/raFgWY" >type=AVC msg=audit(1171293428.420:60288): avc: denied { unlink } for pid=19260 comm="pyzor" name="raFgWY" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171293428.420:60288): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=19260 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171293428.430:60289): avc: denied { read } for pid=19260 comm="pyzor" name="tmp-ycXWw" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171293428.430:60289): arch=c000003e syscall=0 success=yes exit=2201 a0=4 a1=2aaaaf34d000 a2=1000 a3=141 items=0 ppid=6550 pid=19260 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171293428.430:60289): path=2F746D702F746D702D7963585777202864656C6574656429 >type=AVC msg=audit(1171293433.605:60290): avc: denied { create } for pid=19256 comm="procmail" name="_4sE.5TI0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171293433.605:60290): arch=c000003e syscall=2 success=yes exit=6 a0=61f060 a1=c1 a2=124 a3=61f060 items=0 ppid=19253 pid=19256 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171293433.606:60291): avc: denied { write } for pid=19256 comm="procmail" name="_4sE.5TI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171293433.606:60291): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61f060 items=0 ppid=19253 pid=19256 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171293433.606:60291): path="/home/dhighley/_4sE.5TI0FB.douglas" >type=AVC msg=audit(1171293433.606:60292): avc: denied { getattr } for pid=19256 comm="procmail" name="_4sE.5TI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171293433.606:60292): arch=c000003e syscall=4 success=yes exit=0 a0=61f060 a1=7fff609b4eb0 a2=7fff609b4eb0 a3=61f060 items=0 ppid=19253 pid=19256 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171293433.606:60292): path="/home/dhighley/_4sE.5TI0FB.douglas" >type=AVC msg=audit(1171293433.606:60293): avc: denied { link } for pid=19256 comm="procmail" name="_4sE.5TI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171293433.606:60293): arch=c000003e syscall=86 success=yes exit=0 a0=61f060 a1=61b520 a2=7fff609b4dd0 a3=61f060 items=0 ppid=19253 pid=19256 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171293433.606:60294): avc: denied { unlink } for pid=19256 comm="procmail" name="_4sE.5TI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171293433.606:60294): arch=c000003e syscall=87 success=yes exit=0 a0=61f060 a1=61b520 a2=7fff609b4dd0 a3=61f060 items=0 ppid=19253 pid=19256 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171293433.606:60295): avc: denied { append } for pid=19256 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171293433.606:60295): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=19253 pid=19256 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171293601.715:60296): user pid=19276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171293601.715:60297): login pid=19276 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171293601.718:60298): user pid=19277 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171293601.718:60299): login pid=19277 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171293601.718:60300): user pid=19276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171293601.718:60301): user pid=19276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171293601.725:60302): user pid=19277 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171293601.725:60303): user pid=19277 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171293601.738:60304): user pid=19276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171293601.738:60305): user pid=19276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171293733.901:60306): avc: denied { search } for pid=19308 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171293733.901:60306): avc: denied { write } for pid=19308 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171293733.901:60306): avc: denied { add_name } for pid=19308 comm="pyzor" name="vNGwlR" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171293733.901:60306): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=19308 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171293733.901:60307): avc: denied { remove_name } for pid=19308 comm="pyzor" name="vNGwlR" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171293733.901:60307): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=19308 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171293739.372:60308): avc: denied { write } for pid=19304 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171293739.372:60308): avc: denied { add_name } for pid=19304 comm="procmail" name="_otE.rYI0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171293739.372:60308): arch=c000003e syscall=2 success=yes exit=6 a0=61cf10 a1=c1 a2=124 a3=61cf10 items=0 ppid=19299 pid=19304 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171293739.372:60309): avc: denied { remove_name } for pid=19304 comm="procmail" name="_otE.rYI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171293739.372:60309): arch=c000003e syscall=87 success=yes exit=0 a0=61cf10 a1=61b510 a2=7fff07818130 a3=61cf10 items=0 ppid=19299 pid=19304 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171293901.063:60310): user pid=19325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171293901.063:60311): login pid=19325 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171293901.067:60312): user pid=19325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171293901.067:60313): user pid=19325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171294201.399:60314): user pid=19364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171294201.399:60315): login pid=19364 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171294201.402:60316): user pid=19365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171294201.402:60317): login pid=19365 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171294201.403:60318): user pid=19364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171294201.403:60319): user pid=19364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171294201.409:60320): user pid=19365 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171294201.409:60321): user pid=19365 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171294201.422:60322): user pid=19364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171294201.422:60323): user pid=19364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171294425.990:60324): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171294425.990:60324): arch=c000003e syscall=2 success=yes exit=12 a0=34345b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171294425.990:60325): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171294425.990:60325): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171294425.990:60325): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171294426.003:60326): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171294426.003:60326): arch=c000003e syscall=2 success=yes exit=9 a0=34d71e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171294431.051:60327): avc: denied { getattr } for pid=19405 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171294431.051:60327): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff785094b0 a2=7fff785094b0 a3=6c6280 items=0 ppid=6550 pid=19405 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171294431.051:60327): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171294431.051:60328): avc: denied { read } for pid=19405 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171294431.051:60328): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19405 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171294436.012:60329): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171294436.012:60329): arch=c000003e syscall=62 success=yes exit=0 a0=4bcd a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171294436.023:60330): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171294436.023:60330): arch=c000003e syscall=86 success=yes exit=0 a0=32ec7f0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171294436.023:60331): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171294436.023:60331): arch=c000003e syscall=87 success=yes exit=0 a0=32ec7f0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171294436.024:60332): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171294436.024:60332): arch=c000003e syscall=2 success=yes exit=10 a0=3484ed0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171294436.038:60333): avc: denied { create } for pid=19398 comm="procmail" name="_GvE.kjI0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171294436.038:60333): arch=c000003e syscall=2 success=yes exit=6 a0=61fda0 a1=c1 a2=124 a3=61fda0 items=0 ppid=19393 pid=19398 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171294436.039:60334): avc: denied { write } for pid=19398 comm="procmail" name="_GvE.kjI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171294436.039:60334): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61fda0 items=0 ppid=19393 pid=19398 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171294436.039:60334): path="/home/dhighley/_GvE.kjI0FB.douglas" >type=AVC msg=audit(1171294436.039:60335): avc: denied { getattr } for pid=19398 comm="procmail" name="_GvE.kjI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171294436.039:60335): arch=c000003e syscall=4 success=yes exit=0 a0=61fda0 a1=7fffbe0b0ab0 a2=7fffbe0b0ab0 a3=61fda0 items=0 ppid=19393 pid=19398 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171294436.039:60335): path="/home/dhighley/_GvE.kjI0FB.douglas" >type=AVC msg=audit(1171294436.039:60336): avc: denied { link } for pid=19398 comm="procmail" name="_GvE.kjI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171294436.039:60336): arch=c000003e syscall=86 success=yes exit=0 a0=61fda0 a1=61fd80 a2=7fffbe0b09d0 a3=61fda0 items=0 ppid=19393 pid=19398 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171294436.039:60337): avc: denied { unlink } for pid=19398 comm="procmail" name="_GvE.kjI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171294436.039:60337): arch=c000003e syscall=87 success=yes exit=0 a0=61fda0 a1=61fd80 a2=7fffbe0b09d0 a3=61fda0 items=0 ppid=19393 pid=19398 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171294501.747:60338): user pid=19411 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171294501.747:60339): login pid=19411 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171294501.750:60340): user pid=19411 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171294501.750:60341): user pid=19411 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171294801.078:60342): user pid=19445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171294801.078:60343): login pid=19445 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171294801.080:60344): user pid=19446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171294801.081:60345): login pid=19446 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171294801.082:60346): user pid=19445 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171294801.082:60347): user pid=19445 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171294801.087:60348): user pid=19446 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171294801.087:60349): user pid=19446 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171294801.100:60350): user pid=19445 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171294801.100:60351): user pid=19445 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171294957.378:60352): avc: denied { search } for pid=19493 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171294957.378:60352): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19493 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171295101.420:60353): user pid=19508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171295101.421:60354): login pid=19508 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171295101.427:60355): user pid=19508 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171295101.427:60356): user pid=19508 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171295401.750:60357): user pid=19544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171295401.750:60358): login pid=19544 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171295401.752:60359): user pid=19545 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171295401.752:60360): login pid=19545 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171295401.754:60361): user pid=19544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171295401.754:60362): user pid=19544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171295401.757:60363): user pid=19545 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171295401.757:60364): user pid=19545 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171295401.786:60365): user pid=19544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171295401.786:60366): user pid=19544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171295520.181:60367): avc: denied { create } for pid=19573 comm="pyzor" name="MpD2f2" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171295520.181:60367): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=19573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171295520.182:60368): avc: denied { getattr } for pid=19573 comm="pyzor" name="MpD2f2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171295520.182:60368): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff2e3f1890 a2=7fff2e3f1890 a3=3 items=0 ppid=6550 pid=19573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171295520.182:60368): path="/tmp/MpD2f2" >type=AVC msg=audit(1171295520.182:60369): avc: denied { write } for pid=19573 comm="pyzor" name="MpD2f2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171295520.182:60369): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=6550 pid=19573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171295520.182:60369): path="/tmp/MpD2f2" >type=AVC msg=audit(1171295520.182:60370): avc: denied { unlink } for pid=19573 comm="pyzor" name="MpD2f2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171295520.182:60370): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=19573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171295520.183:60371): avc: denied { read } for pid=19573 comm="pyzor" name="tmpBGVMiG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171295520.183:60371): arch=c000003e syscall=0 success=yes exit=347 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=19573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171295520.183:60371): path=2F746D702F746D704247564D6947202864656C6574656429 >type=AVC msg=audit(1171295525.347:60372): avc: denied { append } for pid=19569 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171295525.347:60372): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=19566 pid=19569 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171295701.099:60373): user pid=19589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171295701.099:60374): login pid=19589 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171295701.101:60375): user pid=19589 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171295701.101:60376): user pid=19589 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171296001.423:60377): user pid=19625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171296001.424:60378): login pid=19625 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171296001.425:60379): user pid=19626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171296001.425:60380): login pid=19626 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171296001.430:60381): user pid=19625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171296001.430:60382): user pid=19625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171296001.435:60383): user pid=19626 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171296001.435:60384): user pid=19626 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171296001.451:60385): user pid=19625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171296001.451:60386): user pid=19625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171296061.768:60387): user pid=19641 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171296061.768:60388): login pid=19641 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171296061.772:60389): user pid=19641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171296061.772:60390): user pid=19641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171296062.656:60391): user pid=19641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171296062.657:60392): user pid=19641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171296277.224:60393): avc: denied { search } for pid=19680 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171296277.224:60393): avc: denied { write } for pid=19680 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171296277.224:60393): avc: denied { add_name } for pid=19680 comm="pyzor" name="9Tydjd" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171296277.224:60393): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=19680 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171296277.224:60394): avc: denied { remove_name } for pid=19680 comm="pyzor" name="9Tydjd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171296277.224:60394): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=19680 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171296282.207:60395): avc: denied { write } for pid=19676 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171296282.207:60395): avc: denied { add_name } for pid=19676 comm="procmail" name="_czE.aAJ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171296282.207:60395): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=19673 pid=19676 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171296282.207:60396): avc: denied { remove_name } for pid=19676 comm="procmail" name="_czE.aAJ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171296282.207:60396): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff6da18330 a3=61a500 items=0 ppid=19673 pid=19676 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171296301.665:60397): user pid=19685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171296301.665:60398): login pid=19685 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171296301.669:60399): user pid=19685 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171296301.669:60400): user pid=19685 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171296601.999:60401): user pid=19722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171296601.999:60402): login pid=19722 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171296602.000:60403): user pid=19723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171296602.000:60404): login pid=19723 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171296602.005:60405): user pid=19722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171296602.005:60406): user pid=19722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171296602.008:60407): user pid=19723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171296602.008:60408): user pid=19723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171296602.030:60409): user pid=19722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171296602.030:60410): user pid=19722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171296787.636:60411): user pid=18449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171296787.637:60412): user pid=18449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171296901.641:60413): user pid=19761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171296901.641:60414): login pid=19761 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171296901.644:60415): user pid=19761 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171296901.644:60416): user pid=19761 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171297134.324:60417): avc: denied { getattr } for pid=19798 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171297134.324:60417): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff932bd260 a2=7fff932bd260 a3=6c6280 items=0 ppid=6550 pid=19798 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171297134.324:60417): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171297134.325:60418): avc: denied { read } for pid=19798 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171297134.325:60418): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19798 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171297134.886:60419): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171297134.886:60419): arch=c000003e syscall=2 success=yes exit=9 a0=32d7ae0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171297134.899:60420): avc: denied { create } for pid=19794 comm="procmail" name="_S1E.uNJ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171297134.899:60420): arch=c000003e syscall=2 success=yes exit=6 a0=61b460 a1=c1 a2=124 a3=61b460 items=0 ppid=19791 pid=19794 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171297134.899:60421): avc: denied { write } for pid=19794 comm="procmail" name="_S1E.uNJ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171297134.899:60421): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b460 items=0 ppid=19791 pid=19794 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171297134.899:60421): path="/home/dhighley/_S1E.uNJ0FB.douglas" >type=AVC msg=audit(1171297134.899:60422): avc: denied { getattr } for pid=19794 comm="procmail" name="_S1E.uNJ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171297134.899:60422): arch=c000003e syscall=4 success=yes exit=0 a0=61b460 a1=7fffc1f12910 a2=7fffc1f12910 a3=61b460 items=0 ppid=19791 pid=19794 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171297134.899:60422): path="/home/dhighley/_S1E.uNJ0FB.douglas" >type=AVC msg=audit(1171297134.899:60423): avc: denied { link } for pid=19794 comm="procmail" name="_S1E.uNJ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171297134.899:60423): arch=c000003e syscall=86 success=yes exit=0 a0=61b460 a1=61c600 a2=7fffc1f12830 a3=61b460 items=0 ppid=19791 pid=19794 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171297134.899:60424): avc: denied { unlink } for pid=19794 comm="procmail" name="_S1E.uNJ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171297134.899:60424): arch=c000003e syscall=87 success=yes exit=0 a0=61b460 a1=61c600 a2=7fffc1f12830 a3=61b460 items=0 ppid=19791 pid=19794 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171297201.967:60425): user pid=19805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171297201.967:60426): login pid=19805 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171297201.968:60427): user pid=19804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171297201.968:60428): login pid=19804 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171297201.972:60429): user pid=19804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171297201.972:60430): user pid=19804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171297201.974:60431): user pid=19805 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171297201.974:60432): user pid=19805 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171297201.993:60433): user pid=19804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171297201.994:60434): user pid=19804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171297501.305:60435): user pid=19844 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171297501.305:60436): login pid=19844 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171297501.309:60437): user pid=19844 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171297501.309:60438): user pid=19844 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171297801.630:60439): user pid=19878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171297801.630:60440): login pid=19878 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171297801.631:60441): user pid=19879 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171297801.632:60442): login pid=19879 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171297801.633:60443): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171297801.633:60444): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171297801.643:60445): user pid=19879 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171297801.643:60446): user pid=19879 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171297801.653:60447): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171297801.653:60448): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171298101.969:60449): user pid=19915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171298101.970:60450): login pid=19915 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171298101.974:60451): user pid=19915 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171298101.974:60452): user pid=19915 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171298171.828:60453): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171298171.828:60453): arch=c000003e syscall=2 success=yes exit=12 a0=327eda0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171298171.828:60454): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171298171.828:60454): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171298171.828:60454): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171298171.834:60455): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171298171.834:60455): arch=c000003e syscall=2 success=yes exit=9 a0=3199120 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171298181.844:60456): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171298181.844:60456): arch=c000003e syscall=62 success=yes exit=0 a0=4de6 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171298181.976:60457): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171298181.976:60457): arch=c000003e syscall=86 success=yes exit=0 a0=3239b40 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171298181.976:60458): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171298181.976:60458): arch=c000003e syscall=87 success=yes exit=0 a0=3239b40 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171298401.299:60459): user pid=19962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171298401.299:60460): login pid=19962 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171298401.301:60461): user pid=19963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171298401.302:60462): login pid=19963 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171298401.302:60463): user pid=19962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171298401.302:60464): user pid=19962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171298401.310:60465): user pid=19963 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171298401.310:60466): user pid=19963 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171298401.322:60467): user pid=19962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171298401.322:60468): user pid=19962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171298701.644:60469): user pid=20028 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171298701.645:60470): login pid=20028 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171298701.649:60471): user pid=20028 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171298701.649:60472): user pid=20028 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171298767.335:60473): avc: denied { search } for pid=20051 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171298767.335:60473): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=20051 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171298767.336:60474): avc: denied { search } for pid=20051 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171298767.336:60474): avc: denied { write } for pid=20051 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171298767.336:60474): avc: denied { add_name } for pid=20051 comm="pyzor" name="1NjYXH" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171298767.336:60474): avc: denied { create } for pid=20051 comm="pyzor" name="1NjYXH" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171298767.336:60474): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=20051 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171298767.337:60475): avc: denied { getattr } for pid=20051 comm="pyzor" name="1NjYXH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171298767.337:60475): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb31a2640 a2=7fffb31a2640 a3=3 items=0 ppid=6550 pid=20051 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171298767.337:60475): path="/tmp/1NjYXH" >type=AVC msg=audit(1171298767.337:60476): avc: denied { write } for pid=20051 comm="pyzor" name="1NjYXH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171298767.337:60476): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15864 items=0 ppid=6550 pid=20051 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171298767.337:60476): path="/tmp/1NjYXH" >type=AVC msg=audit(1171298767.337:60477): avc: denied { remove_name } for pid=20051 comm="pyzor" name="1NjYXH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171298767.337:60477): avc: denied { unlink } for pid=20051 comm="pyzor" name="1NjYXH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171298767.337:60477): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=20051 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171298767.339:60478): avc: denied { read } for pid=20051 comm="pyzor" name="tmpX0_817" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171298767.339:60478): arch=c000003e syscall=0 success=yes exit=346 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=20051 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171298767.339:60478): path=2F746D702F746D7058305F383137202864656C6574656429 >type=AVC msg=audit(1171298767.711:60479): avc: denied { write } for pid=20046 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171298767.711:60479): avc: denied { add_name } for pid=20046 comm="procmail" name="_O5E.PnJ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171298767.711:60479): arch=c000003e syscall=2 success=yes exit=6 a0=61c6f0 a1=c1 a2=124 a3=61c6f0 items=0 ppid=20043 pid=20046 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171298767.711:60480): avc: denied { remove_name } for pid=20046 comm="procmail" name="_O5E.PnJ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171298767.711:60480): arch=c000003e syscall=87 success=yes exit=0 a0=61c6f0 a1=61b520 a2=7fff6964ff70 a3=61c6f0 items=0 ppid=20043 pid=20046 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171298767.711:60481): avc: denied { append } for pid=20046 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171298767.711:60481): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=20043 pid=20046 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171299001.972:60482): user pid=20080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171299001.973:60483): login pid=20080 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171299001.973:60484): user pid=20081 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171299001.973:60485): login pid=20081 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171299001.978:60486): user pid=20080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171299001.978:60487): user pid=20080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171299001.979:60488): user pid=20081 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171299001.980:60489): user pid=20081 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171299002.001:60490): user pid=20080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171299002.001:60491): user pid=20080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171299195.467:60492): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171299195.467:60492): arch=c000003e syscall=2 success=yes exit=12 a0=342d360 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171299195.467:60493): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171299195.467:60493): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171299195.467:60493): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171299195.478:60494): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171299195.478:60494): arch=c000003e syscall=2 success=yes exit=9 a0=34188e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171299196.479:60495): avc: denied { getattr } for pid=20118 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171299196.479:60495): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffe5b1fac0 a2=7fffe5b1fac0 a3=6c6280 items=0 ppid=6550 pid=20118 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171299196.479:60495): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171299196.479:60496): avc: denied { read } for pid=20118 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171299196.479:60496): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=20118 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171299201.441:60497): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171299201.441:60497): arch=c000003e syscall=62 success=yes exit=0 a0=4e96 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171299201.457:60498): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171299201.457:60498): arch=c000003e syscall=86 success=yes exit=0 a0=32db650 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171299201.457:60499): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171299201.457:60499): arch=c000003e syscall=87 success=yes exit=0 a0=32db650 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171299201.458:60500): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171299201.458:60500): arch=c000003e syscall=2 success=yes exit=9 a0=336f330 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171299301.314:60501): user pid=20141 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171299301.314:60502): login pid=20141 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171299301.318:60503): user pid=20141 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171299301.318:60504): user pid=20141 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171299601.640:60505): user pid=20177 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171299601.640:60506): login pid=20177 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171299601.643:60507): user pid=20178 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171299601.643:60508): login pid=20178 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171299601.644:60509): user pid=20179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171299601.644:60510): login pid=20179 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171299601.645:60511): user pid=20177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171299601.645:60512): user pid=20177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171299601.650:60513): user pid=20178 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171299601.650:60514): user pid=20178 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171299601.654:60515): user pid=20179 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171299601.654:60516): user pid=20179 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171299601.670:60517): user pid=20177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171299601.670:60518): user pid=20177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171299661.984:60519): user pid=20199 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171299661.985:60520): login pid=20199 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171299661.989:60521): user pid=20199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171299661.989:60522): user pid=20199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171299662.902:60523): user pid=20199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171299662.903:60524): user pid=20199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171299901.912:60525): user pid=20237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171299901.912:60526): login pid=20237 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171299901.915:60527): user pid=20237 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171299901.915:60528): user pid=20237 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171300201.247:60529): user pid=20275 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171300201.247:60530): login pid=20275 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171300201.248:60531): user pid=20276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171300201.249:60532): login pid=20276 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171300201.253:60533): user pid=20275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171300201.254:60534): user pid=20275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171300201.258:60535): user pid=20276 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171300201.258:60536): user pid=20276 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171300201.275:60537): user pid=20275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171300201.275:60538): user pid=20275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171300501.590:60539): user pid=20312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171300501.590:60540): login pid=20312 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171300501.593:60541): user pid=20312 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171300501.593:60542): user pid=20312 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171300801.927:60543): user pid=20351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171300801.927:60544): user pid=20350 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171300801.927:60545): login pid=20351 uid=0 old auid=4294967295 new auid=111 >type=LOGIN msg=audit(1171300801.927:60546): login pid=20350 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171300801.933:60547): user pid=20351 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171300801.933:60548): user pid=20351 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171300801.937:60549): user pid=20350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171300801.937:60550): user pid=20350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171300801.960:60551): user pid=20350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171300801.960:60552): user pid=20350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171301050.067:60553): avc: denied { search } for pid=20395 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171301050.067:60553): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=20395 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171301101.264:60554): user pid=20402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171301101.265:60555): login pid=20402 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171301101.269:60556): user pid=20402 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171301101.269:60557): user pid=20402 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171301401.602:60558): user pid=20441 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171301401.603:60559): login pid=20441 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171301401.605:60560): user pid=20442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171301401.605:60561): login pid=20442 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171301401.606:60562): user pid=20441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171301401.607:60563): user pid=20441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171301401.610:60564): user pid=20442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171301401.610:60565): user pid=20442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171301401.629:60566): user pid=20441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171301401.629:60567): user pid=20441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171301701.951:60568): user pid=20477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171301701.951:60569): login pid=20477 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171301701.955:60570): user pid=20477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171301701.955:60571): user pid=20477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171302001.280:60572): user pid=20513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171302001.281:60573): user pid=20512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171302001.281:60574): login pid=20513 uid=0 old auid=4294967295 new auid=111 >type=LOGIN msg=audit(1171302001.281:60575): login pid=20512 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171302001.286:60576): user pid=20513 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171302001.286:60577): user pid=20513 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171302001.290:60578): user pid=20512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171302001.290:60579): user pid=20512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171302001.314:60580): user pid=20512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171302001.314:60581): user pid=20512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171302052.809:60582): avc: denied { search } for pid=20538 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171302052.809:60582): avc: denied { write } for pid=20538 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171302052.809:60582): avc: denied { add_name } for pid=20538 comm="pyzor" name="VhMCh3" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171302052.809:60582): avc: denied { create } for pid=20538 comm="pyzor" name="VhMCh3" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171302052.809:60582): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=20538 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171302052.809:60583): avc: denied { getattr } for pid=20538 comm="pyzor" name="VhMCh3" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171302052.809:60583): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe113c5d0 a2=7fffe113c5d0 a3=3 items=0 ppid=6550 pid=20538 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171302052.809:60583): path="/tmp/VhMCh3" >type=AVC msg=audit(1171302052.810:60584): avc: denied { write } for pid=20538 comm="pyzor" name="VhMCh3" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171302052.810:60584): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=20538 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171302052.810:60584): path="/tmp/VhMCh3" >type=AVC msg=audit(1171302052.810:60585): avc: denied { remove_name } for pid=20538 comm="pyzor" name="VhMCh3" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171302052.810:60585): avc: denied { unlink } for pid=20538 comm="pyzor" name="VhMCh3" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171302052.810:60585): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=20538 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171302052.811:60586): avc: denied { read } for pid=20538 comm="pyzor" name="tmpbcQiLn" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171302052.811:60586): arch=c000003e syscall=0 success=yes exit=370 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=20538 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171302052.811:60586): path=2F746D702F746D70626351694C6E202864656C6574656429 >type=AVC msg=audit(1171302057.795:60587): avc: denied { write } for pid=20534 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171302057.795:60587): avc: denied { add_name } for pid=20534 comm="procmail" name="_2AF.paK0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171302057.795:60587): arch=c000003e syscall=2 success=yes exit=6 a0=61b620 a1=c1 a2=124 a3=61b620 items=0 ppid=20529 pid=20534 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171302057.795:60588): avc: denied { remove_name } for pid=20534 comm="procmail" name="_2AF.paK0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171302057.795:60588): arch=c000003e syscall=87 success=yes exit=0 a0=61b620 a1=61cd80 a2=7fff1871d040 a3=61b620 items=0 ppid=20529 pid=20534 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171302057.795:60589): avc: denied { append } for pid=20534 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171302057.795:60589): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=20529 pid=20534 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171302301.611:60590): user pid=20560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171302301.611:60591): login pid=20560 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171302301.615:60592): user pid=20560 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171302301.615:60593): user pid=20560 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171302601.936:60594): user pid=20594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171302601.936:60595): login pid=20594 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171302601.939:60596): user pid=20595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171302601.939:60597): login pid=20595 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171302601.939:60598): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171302601.940:60599): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171302601.949:60600): user pid=20595 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171302601.949:60601): user pid=20595 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171302601.959:60602): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171302601.959:60603): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171302901.275:60604): user pid=20631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171302901.276:60605): login pid=20631 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171302901.279:60606): user pid=20631 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171302901.279:60607): user pid=20631 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171303201.602:60608): user pid=20669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171303201.602:60609): login pid=20669 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171303201.604:60610): user pid=20670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171303201.604:60611): login pid=20670 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171303201.606:60612): user pid=20669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171303201.606:60613): user pid=20669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171303201.611:60614): user pid=20670 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171303201.611:60615): user pid=20670 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171303201.624:60616): user pid=20669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171303201.624:60617): user pid=20669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171303261.946:60618): user pid=20686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171303261.946:60619): login pid=20686 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171303261.949:60620): user pid=20686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171303261.950:60621): user pid=20686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171303262.832:60622): user pid=20686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171303262.833:60623): user pid=20686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171303501.840:60624): user pid=20722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171303501.841:60625): login pid=20722 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171303501.843:60626): user pid=20722 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171303501.843:60627): user pid=20722 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171303801.164:60628): user pid=20756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171303801.164:60629): login pid=20756 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171303801.166:60630): user pid=20757 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171303801.167:60631): login pid=20757 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171303801.167:60632): user pid=20756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171303801.167:60633): user pid=20756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171303801.174:60634): user pid=20757 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171303801.174:60635): user pid=20757 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171303801.189:60636): user pid=20756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171303801.189:60637): user pid=20756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171304101.505:60638): user pid=20792 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171304101.505:60639): login pid=20792 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171304101.509:60640): user pid=20792 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171304101.509:60641): user pid=20792 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171304401.831:60642): user pid=20825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171304401.831:60643): login pid=20825 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171304401.834:60644): user pid=20826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171304401.834:60645): login pid=20826 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171304401.837:60646): user pid=20825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171304401.837:60647): user pid=20825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171304401.839:60648): user pid=20826 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171304401.839:60649): user pid=20826 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171304401.860:60650): user pid=20825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171304401.860:60651): user pid=20825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171304701.184:60652): user pid=20861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171304701.184:60653): login pid=20861 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171304701.187:60654): user pid=20861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171304701.187:60655): user pid=20861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171305001.517:60656): user pid=20896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171305001.517:60657): login pid=20896 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171305001.519:60658): user pid=20897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171305001.519:60659): login pid=20897 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171305001.520:60660): user pid=20896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171305001.520:60661): user pid=20896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171305001.523:60662): user pid=20897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171305001.523:60663): user pid=20897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171305001.541:60664): user pid=20896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171305001.541:60665): user pid=20896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171305039.989:60666): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171305039.989:60666): arch=c000003e syscall=2 success=yes exit=12 a0=35506f0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171305039.990:60667): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171305039.990:60667): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171305039.990:60667): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171305039.995:60668): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171305039.995:60668): arch=c000003e syscall=2 success=yes exit=9 a0=322c440 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171305043.822:60669): avc: denied { getattr } for pid=20922 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171305043.822:60669): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff1c1fc1a0 a2=7fff1c1fc1a0 a3=6c6280 items=0 ppid=6550 pid=20922 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171305043.822:60669): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171305043.822:60670): avc: denied { read } for pid=20922 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171305043.822:60670): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=20922 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171305048.784:60671): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171305048.784:60671): arch=c000003e syscall=62 success=yes exit=0 a0=51ba a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171305048.851:60672): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171305048.851:60672): arch=c000003e syscall=86 success=yes exit=0 a0=31e0530 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171305048.851:60673): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171305048.851:60673): arch=c000003e syscall=87 success=yes exit=0 a0=31e0530 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171305048.852:60674): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171305048.852:60674): arch=c000003e syscall=2 success=yes exit=9 a0=3041b80 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171305056.377:60675): avc: denied { create } for pid=20927 comm="procmail" name="__GF.gJL0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171305056.377:60675): arch=c000003e syscall=2 success=yes exit=6 a0=623680 a1=c1 a2=124 a3=623680 items=0 ppid=20924 pid=20927 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171305056.377:60676): avc: denied { write } for pid=20927 comm="procmail" name="__GF.gJL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171305056.377:60676): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=623680 items=0 ppid=20924 pid=20927 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171305056.377:60676): path="/home/dhighley/__GF.gJL0FB.douglas" >type=AVC msg=audit(1171305056.377:60677): avc: denied { getattr } for pid=20927 comm="procmail" name="__GF.gJL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171305056.377:60677): arch=c000003e syscall=4 success=yes exit=0 a0=623680 a1=7fff83754150 a2=7fff83754150 a3=623680 items=0 ppid=20924 pid=20927 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171305056.377:60677): path="/home/dhighley/__GF.gJL0FB.douglas" >type=AVC msg=audit(1171305056.377:60678): avc: denied { link } for pid=20927 comm="procmail" name="__GF.gJL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171305056.377:60678): arch=c000003e syscall=86 success=yes exit=0 a0=623680 a1=61b520 a2=7fff83754070 a3=623680 items=0 ppid=20924 pid=20927 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171305056.378:60679): avc: denied { unlink } for pid=20927 comm="procmail" name="__GF.gJL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171305056.378:60679): arch=c000003e syscall=87 success=yes exit=0 a0=623680 a1=61b520 a2=7fff83754070 a3=623680 items=0 ppid=20924 pid=20927 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171305301.863:60680): user pid=20952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171305301.863:60681): login pid=20952 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171305301.868:60682): user pid=20952 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171305301.868:60683): user pid=20952 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171305539.903:60684): avc: denied { search } for pid=20987 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171305539.903:60684): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=20987 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171305539.904:60685): avc: denied { create } for pid=20987 comm="pyzor" name="hDbpze" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171305539.904:60685): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=20987 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171305539.905:60686): avc: denied { getattr } for pid=20987 comm="pyzor" name="hDbpze" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171305539.905:60686): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff334ced70 a2=7fff334ced70 a3=6c6240 items=0 ppid=6550 pid=20987 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171305539.905:60686): path="/tmp/hDbpze" >type=AVC msg=audit(1171305539.905:60687): avc: denied { write } for pid=20987 comm="pyzor" name="hDbpze" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171305539.905:60687): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=6550 pid=20987 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171305539.905:60687): path="/tmp/hDbpze" >type=AVC msg=audit(1171305539.905:60688): avc: denied { unlink } for pid=20987 comm="pyzor" name="hDbpze" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171305539.905:60688): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ca930 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=20987 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171305539.909:60689): avc: denied { read } for pid=20987 comm="pyzor" name="tmpi8pJ8U" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171305539.909:60689): arch=c000003e syscall=0 success=yes exit=1165 a0=4 a1=2aaaaf34d000 a2=1000 a3=c4 items=0 ppid=6550 pid=20987 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171305539.909:60689): path=2F746D702F746D706938704A3855202864656C6574656429 >type=USER_ACCT msg=audit(1171305601.201:60690): user pid=20994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171305601.202:60691): user pid=20993 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171305601.202:60692): login pid=20994 uid=0 old auid=4294967295 new auid=111 >type=LOGIN msg=audit(1171305601.202:60693): login pid=20993 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171305601.207:60694): user pid=20994 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171305601.207:60695): user pid=20994 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171305601.212:60696): user pid=20993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171305601.212:60697): user pid=20993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171305601.234:60698): user pid=20993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171305601.235:60699): user pid=20993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171305724.502:60700): avc: denied { search } for pid=21026 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171305724.502:60700): avc: denied { write } for pid=21026 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171305724.502:60700): avc: denied { add_name } for pid=21026 comm="pyzor" name="b3vzjc" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171305724.502:60700): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=21026 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171305724.502:60701): avc: denied { remove_name } for pid=21026 comm="pyzor" name="b3vzjc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171305724.502:60701): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=21026 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171305901.534:60702): user pid=21042 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171305901.534:60703): login pid=21042 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171305901.538:60704): user pid=21042 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171305901.538:60705): user pid=21042 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171306099.421:60706): avc: denied { getattr } for pid=21079 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171306099.421:60706): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff55aa4a50 a2=7fff55aa4a50 a3=6c6280 items=0 ppid=6550 pid=21079 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171306099.421:60706): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171306099.421:60707): avc: denied { read } for pid=21079 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171306099.421:60707): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=21079 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171306104.385:60708): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171306104.385:60708): arch=c000003e syscall=62 success=yes exit=0 a0=5257 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171306104.395:60709): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171306104.395:60709): arch=c000003e syscall=2 success=yes exit=9 a0=3572d20 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171306104.772:60710): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171306104.772:60710): arch=c000003e syscall=2 success=yes exit=9 a0=31e8a60 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171306158.150:60711): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171306158.150:60711): arch=c000003e syscall=2 success=yes exit=12 a0=3259c70 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171306158.151:60712): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171306158.151:60712): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171306158.151:60712): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171306160.058:60713): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171306160.058:60713): arch=c000003e syscall=86 success=yes exit=0 a0=3574c30 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171306160.058:60714): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171306160.058:60714): arch=c000003e syscall=87 success=yes exit=0 a0=3574c30 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171306177.118:60715): avc: denied { setattr } for pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171306177.118:60715): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171306177.118:60716): avc: denied { rename } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171306177.118:60716): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171306201.860:60717): user pid=21227 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171306201.860:60718): login pid=21227 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171306201.862:60719): user pid=21228 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171306201.862:60720): login pid=21228 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171306201.867:60721): user pid=21227 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171306201.867:60722): user pid=21227 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171306201.873:60723): user pid=21228 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171306201.873:60724): user pid=21228 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171306201.889:60725): user pid=21227 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171306201.889:60726): user pid=21227 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171306332.116:60727): avc: denied { write } for pid=21403 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171306332.116:60727): avc: denied { add_name } for pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171306332.116:60727): avc: denied { create } for pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171306332.116:60727): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=21395 pid=21403 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171306332.116:60728): avc: denied { write } for pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171306332.116:60728): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b670 items=0 ppid=21395 pid=21403 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171306332.116:60728): path="/home/dhighley/_bOF.cdL0FB.douglas" >type=AVC msg=audit(1171306332.116:60729): avc: denied { getattr } for pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171306332.116:60729): arch=c000003e syscall=4 success=yes exit=0 a0=61b670 a1=7fff82c0d930 a2=7fff82c0d930 a3=61b670 items=0 ppid=21395 pid=21403 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171306332.116:60729): path="/home/dhighley/_bOF.cdL0FB.douglas" >type=AVC msg=audit(1171306332.117:60730): avc: denied { link } for pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171306332.117:60730): arch=c000003e syscall=86 success=yes exit=0 a0=61b670 a1=61c850 a2=7fff82c0d850 a3=61b670 items=0 ppid=21395 pid=21403 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171306332.117:60731): avc: denied { remove_name } for pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171306332.117:60731): avc: denied { unlink } for pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171306332.117:60731): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61c850 a2=7fff82c0d850 a3=61b670 items=0 ppid=21395 pid=21403 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171306332.117:60732): avc: denied { append } for pid=21403 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171306332.117:60732): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=21395 pid=21403 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171306501.199:60733): user pid=21596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171306501.199:60734): login pid=21596 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171306501.203:60735): user pid=21596 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171306501.203:60736): user pid=21596 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171306801.529:60737): user pid=21668 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171306801.529:60738): login pid=21668 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171306801.530:60739): user pid=21669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171306801.530:60740): login pid=21669 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171306801.531:60741): user pid=21668 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171306801.531:60742): user pid=21668 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171306801.538:60743): user pid=21669 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171306801.538:60744): user pid=21669 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171306801.553:60745): user pid=21668 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171306801.553:60746): user pid=21668 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171306861.871:60747): user pid=21684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171306861.871:60748): login pid=21684 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171306861.874:60749): user pid=21684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171306861.874:60750): user pid=21684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171306862.757:60751): user pid=21684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171306862.758:60752): user pid=21684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171307101.764:60753): user pid=21720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171307101.764:60754): login pid=21720 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171307101.768:60755): user pid=21720 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171307101.768:60756): user pid=21720 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171307401.095:60757): user pid=21758 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171307401.095:60758): login pid=21758 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171307401.097:60759): user pid=21759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171307401.097:60760): login pid=21759 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171307401.101:60761): user pid=21758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171307401.102:60762): user pid=21758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171307401.107:60763): user pid=21759 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171307401.107:60764): user pid=21759 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171307401.125:60765): user pid=21758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171307401.125:60766): user pid=21758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171307513.555:60767): avc: denied { create } for pid=21790 comm="pyzor" name="gMEC3J" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171307513.555:60767): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=21790 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171307513.555:60768): avc: denied { getattr } for pid=21790 comm="pyzor" name="gMEC3J" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171307513.555:60768): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff62961210 a2=7fff62961210 a3=2 items=0 ppid=6550 pid=21790 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171307513.555:60768): path="/tmp/gMEC3J" >type=AVC msg=audit(1171307513.555:60769): avc: denied { write } for pid=21790 comm="pyzor" name="gMEC3J" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171307513.555:60769): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=6550 pid=21790 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171307513.555:60769): path="/tmp/gMEC3J" >type=AVC msg=audit(1171307513.555:60770): avc: denied { unlink } for pid=21790 comm="pyzor" name="gMEC3J" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171307513.555:60770): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=21790 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171307513.560:60771): avc: denied { read } for pid=21790 comm="pyzor" name="tmpmvzP1P" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171307513.560:60771): arch=c000003e syscall=0 success=yes exit=1911 a0=4 a1=2aaaaf34d000 a2=1000 a3=164 items=0 ppid=6550 pid=21790 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171307513.560:60771): path=2F746D702F746D706D767A503150202864656C6574656429 >type=CRED_DISP msg=audit(1171307594.798:60772): user pid=20178 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171307594.798:60773): user pid=20178 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171307701.804:60774): user pid=21810 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171307701.804:60775): login pid=21810 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171307701.808:60776): user pid=21810 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171307701.809:60777): user pid=21810 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171308001.131:60778): user pid=21847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171308001.132:60779): login pid=21847 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171308001.134:60780): user pid=21848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171308001.134:60781): login pid=21848 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171308001.137:60782): user pid=21847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171308001.137:60783): user pid=21847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171308001.141:60784): user pid=21848 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171308001.141:60785): user pid=21848 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171308001.167:60786): user pid=21847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171308001.167:60787): user pid=21847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171308186.998:60788): avc: denied { search } for pid=21882 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171308186.998:60788): avc: denied { write } for pid=21882 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171308186.998:60788): avc: denied { add_name } for pid=21882 comm="pyzor" name="wujvJ1" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171308186.998:60788): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=21882 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171308186.998:60789): avc: denied { remove_name } for pid=21882 comm="pyzor" name="wujvJ1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171308186.998:60789): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=21882 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171308192.483:60790): avc: denied { write } for pid=21878 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171308192.483:60790): avc: denied { add_name } for pid=21878 comm="procmail" name="_2VF.g6L0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171308192.483:60790): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=21875 pid=21878 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171308192.484:60791): avc: denied { remove_name } for pid=21878 comm="procmail" name="_2VF.g6L0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171308192.484:60791): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61d8f0 a2=7fff76ec57e0 a3=61b650 items=0 ppid=21875 pid=21878 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171308192.484:60792): avc: denied { append } for pid=21878 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171308192.484:60792): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=21875 pid=21878 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171308301.473:60793): user pid=21895 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171308301.473:60794): login pid=21895 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171308301.476:60795): user pid=21895 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171308301.476:60796): user pid=21895 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171308601.808:60797): user pid=21936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171308601.808:60798): login pid=21936 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171308601.810:60799): user pid=21937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171308601.810:60800): login pid=21937 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171308601.811:60801): user pid=21936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171308601.811:60802): user pid=21936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171308601.821:60803): user pid=21937 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171308601.821:60804): user pid=21937 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171308601.832:60805): user pid=21936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171308601.833:60806): user pid=21936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171308603.220:60807): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171308603.220:60807): arch=c000003e syscall=2 success=yes exit=12 a0=3333050 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171308603.220:60808): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171308603.220:60808): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171308603.220:60808): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171308603.227:60809): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171308603.227:60809): arch=c000003e syscall=2 success=yes exit=9 a0=303f5b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171308603.928:60810): avc: denied { getattr } for pid=21958 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171308603.928:60810): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff56fb2f60 a2=7fff56fb2f60 a3=6c6280 items=0 ppid=6550 pid=21958 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171308603.928:60810): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171308603.928:60811): avc: denied { read } for pid=21958 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171308603.928:60811): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=21958 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171308609.665:60812): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171308609.665:60812): arch=c000003e syscall=86 success=yes exit=0 a0=32b9320 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171308609.665:60813): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171308609.665:60813): arch=c000003e syscall=87 success=yes exit=0 a0=32b9320 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171308609.666:60814): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171308609.666:60814): arch=c000003e syscall=2 success=yes exit=9 a0=2fdd010 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171308609.768:60815): avc: denied { create } for pid=21954 comm="procmail" name="_CXF.BBM0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171308609.768:60815): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=21949 pid=21954 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171308609.768:60816): avc: denied { write } for pid=21954 comm="procmail" name="_CXF.BBM0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171308609.768:60816): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=21949 pid=21954 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171308609.768:60816): path="/home/dhighley/_CXF.BBM0FB.douglas" >type=AVC msg=audit(1171308609.768:60817): avc: denied { getattr } for pid=21954 comm="procmail" name="_CXF.BBM0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171308609.768:60817): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7ffff4c7c680 a2=7ffff4c7c680 a3=61b650 items=0 ppid=21949 pid=21954 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171308609.768:60817): path="/home/dhighley/_CXF.BBM0FB.douglas" >type=AVC msg=audit(1171308609.768:60818): avc: denied { link } for pid=21954 comm="procmail" name="_CXF.BBM0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171308609.768:60818): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61d1f0 a2=7ffff4c7c5a0 a3=61b650 items=0 ppid=21949 pid=21954 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171308609.769:60819): avc: denied { unlink } for pid=21954 comm="procmail" name="_CXF.BBM0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171308609.769:60819): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61d1f0 a2=7ffff4c7c5a0 a3=61b650 items=0 ppid=21949 pid=21954 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171308901.158:60820): user pid=22003 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171308901.159:60821): login pid=22003 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171308901.163:60822): user pid=22003 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171308901.163:60823): user pid=22003 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171309201.486:60824): user pid=22048 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171309201.486:60825): login pid=22048 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171309201.486:60826): user pid=22049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171309201.486:60827): login pid=22049 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171309201.492:60828): user pid=22048 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171309201.492:60829): user pid=22048 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171309201.497:60830): user pid=22049 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171309201.497:60831): user pid=22049 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171309201.512:60832): user pid=22048 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171309201.513:60833): user pid=22048 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171309501.823:60834): user pid=22085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171309501.824:60835): login pid=22085 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171309501.827:60836): user pid=22085 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171309501.827:60837): user pid=22085 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171309801.156:60838): user pid=22117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171309801.156:60839): login pid=22117 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171309801.158:60840): user pid=22118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171309801.158:60841): login pid=22118 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171309801.160:60842): user pid=22117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171309801.160:60843): user pid=22117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171309801.165:60844): user pid=22118 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171309801.165:60845): user pid=22118 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171309801.184:60846): user pid=22117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171309801.184:60847): user pid=22117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171310101.501:60848): user pid=22154 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171310101.501:60849): login pid=22154 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171310101.504:60850): user pid=22154 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171310101.504:60851): user pid=22154 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171310401.831:60852): user pid=22190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171310401.831:60853): login pid=22190 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171310401.833:60854): user pid=22191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171310401.834:60855): login pid=22191 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171310401.834:60856): user pid=22189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171310401.834:60857): login pid=22189 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171310401.838:60858): user pid=22190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171310401.838:60859): user pid=22190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171310401.841:60860): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171310401.841:60861): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171310401.850:60862): user pid=22191 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171310401.850:60863): user pid=22191 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171310401.868:60864): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171310401.868:60865): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171310461.171:60866): user pid=22210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171310461.171:60867): login pid=22210 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171310461.174:60868): user pid=22210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171310461.174:60869): user pid=22210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171310462.086:60870): user pid=22210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171310462.087:60871): user pid=22210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171310701.094:60872): user pid=22246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171310701.095:60873): login pid=22246 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171310701.098:60874): user pid=22246 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171310701.098:60875): user pid=22246 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171311001.434:60876): user pid=22282 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171311001.434:60877): login pid=22282 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171311001.437:60878): user pid=22283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171311001.437:60879): login pid=22283 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171311001.440:60880): user pid=22282 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171311001.440:60881): user pid=22282 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171311001.442:60882): user pid=22283 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171311001.442:60883): user pid=22283 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171311001.462:60884): user pid=22282 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171311001.462:60885): user pid=22282 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171311301.780:60886): user pid=22320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171311301.781:60887): login pid=22320 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171311301.784:60888): user pid=22320 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171311301.784:60889): user pid=22320 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171311601.107:60890): user pid=22353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171311601.107:60891): login pid=22353 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171311601.108:60892): user pid=22352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171311601.108:60893): login pid=22352 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171311601.111:60894): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171311601.111:60895): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171311601.116:60896): user pid=22353 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171311601.116:60897): user pid=22353 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171311601.133:60898): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171311601.133:60899): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171311901.454:60900): user pid=22388 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171311901.454:60901): login pid=22388 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171311901.458:60902): user pid=22388 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171311901.458:60903): user pid=22388 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171312201.778:60904): user pid=22426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171312201.778:60905): login pid=22426 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171312201.780:60906): user pid=22427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171312201.780:60907): login pid=22427 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171312201.782:60908): user pid=22426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171312201.782:60909): user pid=22426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171312201.787:60910): user pid=22427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171312201.787:60911): user pid=22427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171312201.801:60912): user pid=22426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171312201.801:60913): user pid=22426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171312501.113:60914): user pid=22464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171312501.113:60915): login pid=22464 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171312501.117:60916): user pid=22464 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171312501.117:60917): user pid=22464 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171312801.447:60918): user pid=22498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171312801.447:60919): login pid=22498 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171312801.448:60920): user pid=22499 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171312801.448:60921): login pid=22499 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171312801.450:60922): user pid=22498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171312801.450:60923): user pid=22498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171312801.453:60924): user pid=22499 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171312801.453:60925): user pid=22499 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171312801.479:60926): user pid=22498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171312801.479:60927): user pid=22498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171313101.777:60928): user pid=22537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171313101.777:60929): login pid=22537 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171313101.780:60930): user pid=22537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171313101.780:60931): user pid=22537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171313268.400:60932): avc: denied { search } for pid=22571 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171313268.400:60932): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=22571 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171313268.401:60933): avc: denied { create } for pid=22571 comm="pyzor" name="L9QP8k" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171313268.401:60933): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=22571 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171313268.402:60934): avc: denied { getattr } for pid=22571 comm="pyzor" name="L9QP8k" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171313268.402:60934): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffc6536de0 a2=7fffc6536de0 a3=2 items=0 ppid=6550 pid=22571 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171313268.402:60934): path="/tmp/L9QP8k" >type=AVC msg=audit(1171313268.402:60935): avc: denied { write } for pid=22571 comm="pyzor" name="L9QP8k" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171313268.402:60935): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=22571 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171313268.402:60935): path="/tmp/L9QP8k" >type=AVC msg=audit(1171313268.402:60936): avc: denied { unlink } for pid=22571 comm="pyzor" name="L9QP8k" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171313268.402:60936): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=22571 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171313268.416:60937): avc: denied { read } for pid=22571 comm="pyzor" name="tmp1deQmC" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171313268.416:60937): arch=c000003e syscall=0 success=yes exit=2645 a0=4 a1=2aaaaf34d000 a2=1000 a3=1f1 items=0 ppid=6550 pid=22571 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171313268.416:60937): path=2F746D702F746D70316465516D43202864656C6574656429 >type=AVC msg=audit(1171313273.505:60938): avc: denied { write } for pid=22567 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171313273.505:60938): avc: denied { add_name } for pid=22567 comm="procmail" name="_ngF.5JN0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171313273.505:60938): arch=c000003e syscall=2 success=yes exit=6 a0=61f9b0 a1=c1 a2=124 a3=61f9b0 items=0 ppid=22562 pid=22567 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171313273.505:60939): avc: denied { remove_name } for pid=22567 comm="procmail" name="_ngF.5JN0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171313273.505:60939): arch=c000003e syscall=87 success=yes exit=0 a0=61f9b0 a1=61b510 a2=7fffe49822a0 a3=61f9b0 items=0 ppid=22562 pid=22567 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171313273.506:60940): avc: denied { append } for pid=22567 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171313273.506:60940): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=22562 pid=22567 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171313401.114:60941): user pid=22583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171313401.114:60942): login pid=22583 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171313401.116:60943): user pid=22584 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171313401.116:60944): login pid=22584 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171313401.120:60945): user pid=22583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171313401.120:60946): user pid=22583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171313401.123:60947): user pid=22584 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171313401.124:60948): user pid=22584 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171313401.143:60949): user pid=22583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171313401.143:60950): user pid=22583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171313701.451:60951): user pid=22621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171313701.452:60952): login pid=22621 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171313701.454:60953): user pid=22621 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171313701.454:60954): user pid=22621 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171314001.779:60955): user pid=22658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171314001.779:60956): login pid=22658 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171314001.781:60957): user pid=22659 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171314001.782:60958): login pid=22659 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171314001.782:60959): user pid=22658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171314001.782:60960): user pid=22658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171314001.787:60961): user pid=22659 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171314001.787:60962): user pid=22659 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171314001.802:60963): user pid=22658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171314001.802:60964): user pid=22658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171314061.110:60965): user pid=22673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171314061.110:60966): login pid=22673 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171314061.113:60967): user pid=22673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171314061.114:60968): user pid=22673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171314062.027:60969): user pid=22673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171314062.027:60970): user pid=22673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171314301.034:60971): user pid=22710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171314301.035:60972): login pid=22710 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171314301.038:60973): user pid=22710 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171314301.038:60974): user pid=22710 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171314601.376:60975): user pid=22745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171314601.377:60976): login pid=22745 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171314601.379:60977): user pid=22746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171314601.379:60978): login pid=22746 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171314601.380:60979): user pid=22745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171314601.381:60980): user pid=22745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171314601.384:60981): user pid=22746 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171314601.384:60982): user pid=22746 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171314601.400:60983): user pid=22745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171314601.400:60984): user pid=22745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171314665.119:60985): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171314665.119:60985): arch=c000003e syscall=2 success=yes exit=12 a0=3394ab0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171314665.119:60986): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171314665.119:60986): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171314665.119:60986): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171314665.127:60987): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171314665.127:60987): arch=c000003e syscall=2 success=yes exit=9 a0=347de90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171314669.059:60988): avc: denied { getattr } for pid=22775 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171314669.059:60988): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff2f488430 a2=7fff2f488430 a3=6c6280 items=0 ppid=6550 pid=22775 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171314669.059:60988): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171314669.059:60989): avc: denied { read } for pid=22775 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171314669.059:60989): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=22775 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171314674.021:60990): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171314674.021:60990): arch=c000003e syscall=62 success=yes exit=0 a0=58f7 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171314674.090:60991): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171314674.090:60991): arch=c000003e syscall=86 success=yes exit=0 a0=32be020 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171314674.090:60992): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171314674.090:60992): arch=c000003e syscall=87 success=yes exit=0 a0=32be020 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171314674.091:60993): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171314674.091:60993): arch=c000003e syscall=2 success=yes exit=9 a0=327f1c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171314901.711:60994): user pid=22799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171314901.711:60995): login pid=22799 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171314901.714:60996): user pid=22799 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171314901.714:60997): user pid=22799 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171314929.215:60998): avc: denied { create } for pid=22818 comm="procmail" name="_ikF.xjN0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171314929.215:60998): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=22811 pid=22818 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171314929.216:60999): avc: denied { write } for pid=22818 comm="procmail" name="_ikF.xjN0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171314929.216:60999): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=22811 pid=22818 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171314929.216:60999): path="/home/dhighley/_ikF.xjN0FB.douglas" >type=AVC msg=audit(1171314929.216:61000): avc: denied { getattr } for pid=22818 comm="procmail" name="_ikF.xjN0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171314929.216:61000): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7fff5774d140 a2=7fff5774d140 a3=61a500 items=0 ppid=22811 pid=22818 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171314929.216:61000): path="/home/dhighley/_ikF.xjN0FB.douglas" >type=AVC msg=audit(1171314929.216:61001): avc: denied { link } for pid=22818 comm="procmail" name="_ikF.xjN0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171314929.216:61001): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff5774d060 a3=61a500 items=0 ppid=22811 pid=22818 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171314929.217:61002): avc: denied { unlink } for pid=22818 comm="procmail" name="_ikF.xjN0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171314929.217:61002): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff5774d060 a3=61a500 items=0 ppid=22811 pid=22818 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171315201.037:61003): user pid=22849 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171315201.037:61004): login pid=22849 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171315201.039:61005): user pid=22848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171315201.039:61006): login pid=22848 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171315201.044:61007): user pid=22849 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171315201.044:61008): user pid=22849 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171315201.047:61009): user pid=22848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171315201.047:61010): user pid=22848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171315201.069:61011): user pid=22848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171315201.070:61012): user pid=22848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171315218.992:61013): avc: denied { search } for pid=22871 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171315218.992:61013): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=22871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171315218.993:61014): avc: denied { create } for pid=22871 comm="pyzor" name="_2bBgp" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171315218.993:61014): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=22871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171315218.993:61015): avc: denied { getattr } for pid=22871 comm="pyzor" name="_2bBgp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171315218.993:61015): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffdab82430 a2=7fffdab82430 a3=2 items=0 ppid=6550 pid=22871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171315218.993:61015): path="/tmp/_2bBgp" >type=AVC msg=audit(1171315218.994:61016): avc: denied { write } for pid=22871 comm="pyzor" name="_2bBgp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171315218.994:61016): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=6550 pid=22871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171315218.994:61016): path="/tmp/_2bBgp" >type=AVC msg=audit(1171315218.994:61017): avc: denied { unlink } for pid=22871 comm="pyzor" name="_2bBgp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171315218.994:61017): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=22871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171315219.025:61018): avc: denied { read } for pid=22871 comm="pyzor" name="tmpf5PO-W" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171315219.025:61018): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=25c4 items=0 ppid=6550 pid=22871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171315219.025:61018): path=2F746D702F746D706635504F2D57202864656C6574656429 >type=AVC msg=audit(1171315221.045:61019): avc: denied { append } for pid=22867 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171315221.045:61019): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=22862 pid=22867 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171315230.444:61020): avc: denied { getattr } for pid=22881 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171315230.444:61020): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff62aeaa90 a2=7fff62aeaa90 a3=6c6280 items=0 ppid=6550 pid=22881 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171315230.444:61020): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171315230.444:61021): avc: denied { read } for pid=22881 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171315230.444:61021): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=22881 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171315235.507:61022): avc: denied { append } for pid=22877 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171315235.507:61022): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=22872 pid=22877 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171315235.508:61023): avc: denied { lock } for pid=22877 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171315235.508:61023): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=22872 pid=22877 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171315235.508:61023): path="/home/phighley/spamlog" >type=AVC msg=audit(1171315351.292:61024): avc: denied { search } for pid=22903 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171315351.292:61024): avc: denied { write } for pid=22903 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171315351.292:61024): avc: denied { add_name } for pid=22903 comm="pyzor" name="Ho4c9W" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171315351.292:61024): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=22903 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171315351.292:61025): avc: denied { remove_name } for pid=22903 comm="pyzor" name="Ho4c9W" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171315351.292:61025): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=22903 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171315501.368:61026): user pid=22917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171315501.369:61027): login pid=22917 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171315501.372:61028): user pid=22917 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171315501.372:61029): user pid=22917 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171315725.803:61030): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171315725.803:61030): arch=c000003e syscall=2 success=yes exit=12 a0=33ed060 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171315725.804:61031): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171315725.804:61031): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171315725.804:61031): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171315725.813:61032): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171315725.813:61032): arch=c000003e syscall=2 success=yes exit=9 a0=33376a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171315726.472:61033): avc: denied { getattr } for pid=22972 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171315726.472:61033): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffcc8c1870 a2=7fffcc8c1870 a3=6c6280 items=0 ppid=6550 pid=22972 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171315726.472:61033): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171315726.472:61034): avc: denied { read } for pid=22972 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171315726.472:61034): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=22972 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171315731.435:61035): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171315731.435:61035): arch=c000003e syscall=62 success=yes exit=0 a0=59bc a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171315731.504:61036): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171315731.504:61036): arch=c000003e syscall=86 success=yes exit=0 a0=3624c50 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171315731.505:61037): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171315731.505:61037): arch=c000003e syscall=87 success=yes exit=0 a0=3624c50 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171315731.505:61038): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171315731.505:61038): arch=c000003e syscall=2 success=yes exit=9 a0=308ff60 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171315801.697:61039): user pid=22979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171315801.698:61040): login pid=22979 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171315801.700:61041): user pid=22980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171315801.700:61042): login pid=22980 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171315801.701:61043): user pid=22979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171315801.701:61044): user pid=22979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171315801.705:61045): user pid=22980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171315801.705:61046): user pid=22980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171315801.726:61047): user pid=22979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171315801.726:61048): user pid=22979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171316101.046:61049): user pid=23018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171316101.046:61050): login pid=23018 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171316101.049:61051): user pid=23018 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171316101.049:61052): user pid=23018 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171316401.381:61053): user pid=23050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171316401.381:61054): login pid=23050 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171316401.382:61055): user pid=23051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171316401.382:61056): login pid=23051 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171316401.385:61057): user pid=23050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171316401.385:61058): user pid=23050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171316401.387:61059): user pid=23051 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171316401.387:61060): user pid=23051 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171316401.407:61061): user pid=23050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171316401.407:61062): user pid=23050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171316701.722:61063): user pid=23090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171316701.723:61064): login pid=23090 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171316701.727:61065): user pid=23090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171316701.727:61066): user pid=23090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171317001.055:61067): user pid=23144 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171317001.055:61068): login pid=23144 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171317001.056:61069): user pid=23145 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171317001.056:61070): login pid=23145 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171317001.061:61071): user pid=23144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171317001.061:61072): user pid=23144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171317001.066:61073): user pid=23145 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171317001.067:61074): user pid=23145 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171317001.087:61075): user pid=23144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171317001.087:61076): user pid=23144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171317301.409:61077): user pid=23182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171317301.410:61078): login pid=23182 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171317301.413:61079): user pid=23182 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171317301.413:61080): user pid=23182 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171317381.803:61081): avc: denied { search } for pid=23212 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171317381.803:61081): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=23212 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171317381.804:61082): avc: denied { create } for pid=23212 comm="pyzor" name="iEWofK" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171317381.804:61082): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=23212 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171317381.804:61083): avc: denied { getattr } for pid=23212 comm="pyzor" name="iEWofK" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171317381.804:61083): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffffe4e7d90 a2=7ffffe4e7d90 a3=2 items=0 ppid=6550 pid=23212 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171317381.804:61083): path="/tmp/iEWofK" >type=AVC msg=audit(1171317381.804:61084): avc: denied { write } for pid=23212 comm="pyzor" name="iEWofK" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171317381.804:61084): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=23212 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171317381.804:61084): path="/tmp/iEWofK" >type=AVC msg=audit(1171317381.804:61085): avc: denied { unlink } for pid=23212 comm="pyzor" name="iEWofK" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171317381.804:61085): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=23212 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171317381.807:61086): avc: denied { read } for pid=23212 comm="pyzor" name="tmpmEiZ3q" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171317381.807:61086): arch=c000003e syscall=0 success=yes exit=828 a0=4 a1=2aaaaf34d000 a2=1000 a3=af items=0 ppid=6550 pid=23212 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171317381.807:61086): path=2F746D702F746D706D45695A3371202864656C6574656429 >type=AVC msg=audit(1171317387.103:61087): avc: denied { write } for pid=23208 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171317387.103:61087): avc: denied { add_name } for pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171317387.103:61087): avc: denied { create } for pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171317387.103:61087): arch=c000003e syscall=2 success=yes exit=6 a0=622320 a1=c1 a2=124 a3=622320 items=0 ppid=23199 pid=23208 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171317387.103:61088): avc: denied { write } for pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171317387.103:61088): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=622320 items=0 ppid=23199 pid=23208 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171317387.103:61088): path="/home/dhighley/_oqF.LKO0FB.douglas" >type=AVC msg=audit(1171317387.103:61089): avc: denied { getattr } for pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171317387.103:61089): arch=c000003e syscall=4 success=yes exit=0 a0=622320 a1=7fff87653050 a2=7fff87653050 a3=622320 items=0 ppid=23199 pid=23208 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171317387.103:61089): path="/home/dhighley/_oqF.LKO0FB.douglas" >type=AVC msg=audit(1171317387.104:61090): avc: denied { link } for pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171317387.104:61090): arch=c000003e syscall=86 success=yes exit=0 a0=622320 a1=61b520 a2=7fff87652f70 a3=622320 items=0 ppid=23199 pid=23208 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171317387.104:61091): avc: denied { remove_name } for pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171317387.104:61091): avc: denied { unlink } for pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171317387.104:61091): arch=c000003e syscall=87 success=yes exit=0 a0=622320 a1=61b520 a2=7fff87652f70 a3=622320 items=0 ppid=23199 pid=23208 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171317565.079:61092): avc: denied { getattr } for pid=23247 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171317565.079:61092): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffff24053b0 a2=7ffff24053b0 a3=6c6280 items=0 ppid=6550 pid=23247 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171317565.079:61092): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171317565.079:61093): avc: denied { read } for pid=23247 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171317565.079:61093): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=23247 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171317601.732:61094): user pid=23252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171317601.732:61095): login pid=23252 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171317601.734:61096): user pid=23253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171317601.734:61097): login pid=23253 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171317601.736:61098): user pid=23252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171317601.736:61099): user pid=23252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171317601.739:61100): user pid=23253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171317601.739:61101): user pid=23253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171317601.758:61102): user pid=23252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171317601.758:61103): user pid=23252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171317661.075:61104): user pid=23268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171317661.075:61105): login pid=23268 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171317661.079:61106): user pid=23268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171317661.079:61107): user pid=23268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171317661.960:61108): user pid=23268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171317661.961:61109): user pid=23268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171317889.819:61110): avc: denied { search } for pid=23316 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171317889.819:61110): avc: denied { write } for pid=23316 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171317889.819:61110): avc: denied { add_name } for pid=23316 comm="pyzor" name="D2vhCm" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171317889.819:61110): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=23316 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171317889.819:61111): avc: denied { remove_name } for pid=23316 comm="pyzor" name="D2vhCm" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171317889.819:61111): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=23316 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171317901.969:61112): user pid=23319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171317901.969:61113): login pid=23319 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171317901.973:61114): user pid=23319 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171317901.973:61115): user pid=23319 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171318048.828:61116): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171318048.828:61116): arch=c000003e syscall=2 success=yes exit=9 a0=3386330 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171318049.531:61117): avc: denied { getattr } for pid=23351 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171318049.531:61117): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff8f7026a0 a2=7fff8f7026a0 a3=6c6280 items=0 ppid=6550 pid=23351 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171318049.531:61117): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171318049.531:61118): avc: denied { read } for pid=23351 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171318049.531:61118): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=23351 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171318052.035:61119): avc: denied { ioctl } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171318052.035:61119): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171318052.035:61119): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.6550" >type=AVC msg=audit(1171318052.036:61120): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171318052.036:61120): arch=c000003e syscall=86 success=yes exit=0 a0=309c4b0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171318052.036:61121): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171318052.036:61121): arch=c000003e syscall=87 success=yes exit=0 a0=309c4b0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171318052.037:61122): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171318052.037:61122): arch=c000003e syscall=2 success=yes exit=9 a0=2da3630 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171318201.305:61123): user pid=23365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171318201.305:61124): login pid=23365 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171318201.307:61125): user pid=23364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171318201.307:61126): login pid=23364 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171318201.312:61127): user pid=23365 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171318201.312:61128): user pid=23365 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171318201.315:61129): user pid=23364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171318201.315:61130): user pid=23364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171318201.337:61131): user pid=23364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171318201.338:61132): user pid=23364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171318205.131:61133): avc: denied { setattr } for pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171318205.131:61133): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171318205.131:61134): avc: denied { rename } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171318205.131:61134): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171318205.365:61135): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171318205.365:61135): arch=c000003e syscall=1 success=yes exit=3576 a0=9 a1=34e6aa0 a2=df8 a3=11 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171318205.365:61135): path="/home/dhighley/.spamassassin/bayes_journal" >type=CRED_DISP msg=audit(1171318387.951:61136): user pid=22190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171318387.951:61137): user pid=22190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171318501.956:61138): user pid=23412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171318501.956:61139): login pid=23412 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171318501.960:61140): user pid=23412 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171318501.960:61141): user pid=23412 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171318801.283:61142): user pid=23444 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171318801.284:61143): login pid=23444 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171318801.286:61144): user pid=23445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171318801.286:61145): login pid=23445 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171318801.287:61146): user pid=23444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171318801.287:61147): user pid=23444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171318801.291:61148): user pid=23445 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171318801.291:61149): user pid=23445 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171318801.307:61150): user pid=23444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171318801.307:61151): user pid=23444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171319101.626:61152): user pid=23479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171319101.626:61153): login pid=23479 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171319101.629:61154): user pid=23479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171319101.629:61155): user pid=23479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171319350.138:61156): avc: denied { search } for pid=23519 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171319350.138:61156): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=23519 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171319401.957:61157): user pid=23526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171319401.957:61158): login pid=23526 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171319401.959:61159): user pid=23527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171319401.959:61160): login pid=23527 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171319401.962:61161): user pid=23526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171319401.962:61162): user pid=23526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171319401.968:61163): user pid=23527 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171319401.968:61164): user pid=23527 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171319401.988:61165): user pid=23526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171319401.989:61166): user pid=23526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171319701.303:61167): user pid=23567 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171319701.303:61168): login pid=23567 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171319701.306:61169): user pid=23567 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171319701.306:61170): user pid=23567 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171319730.970:61171): avc: denied { search } for pid=23587 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171319730.970:61171): avc: denied { write } for pid=23587 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171319730.970:61171): avc: denied { add_name } for pid=23587 comm="pyzor" name="f-hSC2" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171319730.970:61171): avc: denied { create } for pid=23587 comm="pyzor" name="f-hSC2" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171319730.970:61171): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=23587 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171319730.970:61172): avc: denied { getattr } for pid=23587 comm="pyzor" name="f-hSC2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171319730.970:61172): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff33c334e0 a2=7fff33c334e0 a3=2 items=0 ppid=6550 pid=23587 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171319730.970:61172): path="/tmp/f-hSC2" >type=AVC msg=audit(1171319730.971:61173): avc: denied { write } for pid=23587 comm="pyzor" name="f-hSC2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171319730.971:61173): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=6550 pid=23587 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171319730.971:61173): path="/tmp/f-hSC2" >type=AVC msg=audit(1171319730.971:61174): avc: denied { remove_name } for pid=23587 comm="pyzor" name="f-hSC2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171319730.971:61174): avc: denied { unlink } for pid=23587 comm="pyzor" name="f-hSC2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171319730.971:61174): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=23587 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171319730.972:61175): avc: denied { read } for pid=23587 comm="pyzor" name="tmpZSEWp-" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171319730.972:61175): arch=c000003e syscall=0 success=yes exit=824 a0=4 a1=2aaaaf34d000 a2=1000 a3=b1 items=0 ppid=6550 pid=23587 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171319730.972:61175): path=2F746D702F746D705A534557702D202864656C6574656429 >type=USER_ACCT msg=audit(1171320001.629:61176): user pid=23613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171320001.629:61177): login pid=23613 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171320001.632:61178): user pid=23614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171320001.632:61179): login pid=23614 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171320001.633:61180): user pid=23613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171320001.633:61181): user pid=23613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171320001.639:61182): user pid=23614 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171320001.640:61183): user pid=23614 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171320001.651:61184): user pid=23613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171320001.652:61185): user pid=23613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171320301.971:61186): user pid=23651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171320301.972:61187): login pid=23651 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171320301.975:61188): user pid=23651 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171320301.975:61189): user pid=23651 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171320601.310:61190): user pid=23684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171320601.311:61191): login pid=23684 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171320601.313:61192): user pid=23685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171320601.313:61193): login pid=23685 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171320601.315:61194): user pid=23684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171320601.315:61195): user pid=23684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171320601.325:61196): user pid=23685 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171320601.325:61197): user pid=23685 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171320601.335:61198): user pid=23684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171320601.336:61199): user pid=23684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171320832.804:61200): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171320832.804:61200): arch=c000003e syscall=2 success=yes exit=12 a0=34700e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171320832.804:61201): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171320832.804:61201): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171320832.804:61201): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171320832.823:61202): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171320832.823:61202): arch=c000003e syscall=2 success=yes exit=9 a0=3236e00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171320833.607:61203): avc: denied { getattr } for pid=23724 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171320833.607:61203): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffffd6d7680 a2=7ffffd6d7680 a3=6c6280 items=0 ppid=6550 pid=23724 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171320833.607:61203): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171320833.607:61204): avc: denied { read } for pid=23724 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171320833.607:61204): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=23724 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171320833.887:61205): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171320833.887:61205): arch=c000003e syscall=86 success=yes exit=0 a0=354d530 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171320833.887:61206): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171320833.887:61206): arch=c000003e syscall=87 success=yes exit=0 a0=354d530 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171320833.888:61207): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171320833.888:61207): arch=c000003e syscall=2 success=yes exit=9 a0=33ba220 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171320833.904:61208): avc: denied { write } for pid=23720 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171320833.904:61208): avc: denied { add_name } for pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171320833.904:61208): avc: denied { create } for pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171320833.904:61208): arch=c000003e syscall=2 success=yes exit=6 a0=623a50 a1=c1 a2=124 a3=623a50 items=0 ppid=23715 pid=23720 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171320833.905:61209): avc: denied { write } for pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171320833.905:61209): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=623a50 items=0 ppid=23715 pid=23720 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171320833.905:61209): path="/home/dhighley/_oyF.BAP0FB.douglas" >type=AVC msg=audit(1171320833.905:61210): avc: denied { getattr } for pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171320833.905:61210): arch=c000003e syscall=4 success=yes exit=0 a0=623a50 a1=7fff2d6d80d0 a2=7fff2d6d80d0 a3=623a50 items=0 ppid=23715 pid=23720 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171320833.905:61210): path="/home/dhighley/_oyF.BAP0FB.douglas" >type=AVC msg=audit(1171320833.905:61211): avc: denied { link } for pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171320833.905:61211): arch=c000003e syscall=86 success=yes exit=0 a0=623a50 a1=61b520 a2=7fff2d6d7ff0 a3=623a50 items=0 ppid=23715 pid=23720 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171320833.905:61212): avc: denied { remove_name } for pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171320833.905:61212): avc: denied { unlink } for pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171320833.905:61212): arch=c000003e syscall=87 success=yes exit=0 a0=623a50 a1=61b520 a2=7fff2d6d7ff0 a3=623a50 items=0 ppid=23715 pid=23720 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171320833.905:61213): avc: denied { append } for pid=23720 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171320833.905:61213): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=23715 pid=23720 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171320901.656:61214): user pid=23731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171320901.656:61215): login pid=23731 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171320901.659:61216): user pid=23731 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171320901.659:61217): user pid=23731 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171321201.982:61218): user pid=23767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171321201.982:61219): login pid=23767 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171321201.984:61220): user pid=23768 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171321201.984:61221): login pid=23768 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171321201.985:61222): user pid=23766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171321201.985:61223): login pid=23766 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171321201.988:61224): user pid=23767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171321201.988:61225): user pid=23767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171321201.991:61226): user pid=23766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171321201.991:61227): user pid=23766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171321202.000:61228): user pid=23768 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171321202.000:61229): user pid=23768 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171321202.019:61230): user pid=23766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171321202.020:61231): user pid=23766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171321261.322:61232): user pid=23787 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171321261.322:61233): login pid=23787 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171321261.326:61234): user pid=23787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171321261.326:61235): user pid=23787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171321262.211:61236): user pid=23787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171321262.211:61237): user pid=23787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171321501.219:61238): user pid=23836 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171321501.219:61239): login pid=23836 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171321501.223:61240): user pid=23836 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171321501.223:61241): user pid=23836 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171321724.992:61242): avc: denied { search } for pid=23873 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171321724.992:61242): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=23873 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171321729.954:61243): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171321729.954:61243): arch=c000003e syscall=62 success=yes exit=0 a0=5d41 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171321801.546:61244): user pid=23880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171321801.546:61245): login pid=23880 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171321801.548:61246): user pid=23881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171321801.548:61247): login pid=23881 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171321801.550:61248): user pid=23880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171321801.550:61249): user pid=23880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171321801.555:61250): user pid=23881 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171321801.555:61251): user pid=23881 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171321801.568:61252): user pid=23880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171321801.568:61253): user pid=23880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171322101.882:61254): user pid=23918 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171322101.882:61255): login pid=23918 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171322101.885:61256): user pid=23918 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171322101.885:61257): user pid=23918 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171322401.222:61258): user pid=23951 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171322401.222:61259): login pid=23951 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171322401.224:61260): user pid=23950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171322401.224:61261): login pid=23950 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171322401.226:61262): user pid=23950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171322401.226:61263): user pid=23950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171322401.229:61264): user pid=23951 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171322401.229:61265): user pid=23951 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171322401.256:61266): user pid=23950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171322401.256:61267): user pid=23950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171322701.565:61268): user pid=23986 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171322701.565:61269): login pid=23986 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171322701.569:61270): user pid=23986 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171322701.569:61271): user pid=23986 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171323001.889:61272): user pid=24022 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171323001.889:61273): login pid=24022 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171323001.891:61274): user pid=24023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171323001.892:61275): login pid=24023 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171323001.892:61276): user pid=24022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171323001.892:61277): user pid=24022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171323001.903:61278): user pid=24023 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171323001.903:61279): user pid=24023 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171323001.911:61280): user pid=24022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171323001.911:61281): user pid=24022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171323301.242:61282): user pid=24057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171323301.243:61283): login pid=24057 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171323301.246:61284): user pid=24057 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171323301.247:61285): user pid=24057 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171323601.567:61286): user pid=24089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171323601.568:61287): login pid=24089 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171323601.570:61288): user pid=24090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171323601.570:61289): login pid=24090 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171323601.571:61290): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171323601.572:61291): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171323601.575:61292): user pid=24090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171323601.575:61293): user pid=24090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171323601.591:61294): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171323601.591:61295): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171323901.908:61296): user pid=24127 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171323901.908:61297): login pid=24127 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171323901.911:61298): user pid=24127 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171323901.911:61299): user pid=24127 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171324201.232:61300): user pid=24161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171324201.232:61301): login pid=24161 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171324201.233:61302): user pid=24160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171324201.234:61303): login pid=24160 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171324201.236:61304): user pid=24160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171324201.236:61305): user pid=24160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171324201.241:61306): user pid=24161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171324201.241:61307): user pid=24161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171324201.254:61308): user pid=24160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171324201.254:61309): user pid=24160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171324501.581:61310): user pid=24197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171324501.581:61311): login pid=24197 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171324501.585:61312): user pid=24197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171324501.585:61313): user pid=24197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171324776.235:61314): avc: denied { search } for pid=24237 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171324776.235:61314): avc: denied { write } for pid=24237 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171324776.235:61314): avc: denied { add_name } for pid=24237 comm="pyzor" name="j7yBQu" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171324776.235:61314): avc: denied { create } for pid=24237 comm="pyzor" name="j7yBQu" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171324776.235:61314): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=24237 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171324776.236:61315): avc: denied { getattr } for pid=24237 comm="pyzor" name="j7yBQu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171324776.236:61315): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff466cb5d0 a2=7fff466cb5d0 a3=2 items=0 ppid=6550 pid=24237 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171324776.236:61315): path="/tmp/j7yBQu" >type=AVC msg=audit(1171324776.236:61316): avc: denied { write } for pid=24237 comm="pyzor" name="j7yBQu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171324776.236:61316): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=6550 pid=24237 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171324776.236:61316): path="/tmp/j7yBQu" >type=AVC msg=audit(1171324776.236:61317): avc: denied { remove_name } for pid=24237 comm="pyzor" name="j7yBQu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171324776.236:61317): avc: denied { unlink } for pid=24237 comm="pyzor" name="j7yBQu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171324776.236:61317): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=24237 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171324776.241:61318): avc: denied { read } for pid=24237 comm="pyzor" name="tmp4dawcp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171324776.241:61318): arch=c000003e syscall=0 success=yes exit=996 a0=4 a1=2aaaaf34d000 a2=1000 a3=89 items=0 ppid=6550 pid=24237 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171324776.241:61318): path=2F746D702F746D70346461776370202864656C6574656429 >type=USER_ACCT msg=audit(1171324801.910:61319): user pid=24243 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171324801.910:61320): login pid=24243 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171324801.912:61321): user pid=24244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171324801.913:61322): login pid=24244 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171324801.916:61323): user pid=24243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171324801.916:61324): user pid=24243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171324801.918:61325): user pid=24244 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171324801.918:61326): user pid=24244 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171324801.937:61327): user pid=24243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171324801.937:61328): user pid=24243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171324861.245:61329): user pid=24259 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171324861.245:61330): login pid=24259 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171324861.248:61331): user pid=24259 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171324861.248:61332): user pid=24259 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171324862.131:61333): user pid=24259 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171324862.132:61334): user pid=24259 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171325101.138:61335): user pid=24294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171325101.139:61336): login pid=24294 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171325101.141:61337): user pid=24294 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171325101.142:61338): user pid=24294 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171325401.464:61339): user pid=24330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171325401.464:61340): login pid=24330 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171325401.466:61341): user pid=24331 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171325401.466:61342): login pid=24331 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171325401.468:61343): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171325401.468:61344): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171325401.471:61345): user pid=24331 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171325401.471:61346): user pid=24331 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171325401.488:61347): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171325401.488:61348): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171325701.800:61349): user pid=24366 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171325701.800:61350): login pid=24366 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171325701.804:61351): user pid=24366 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171325701.804:61352): user pid=24366 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171326001.123:61353): user pid=24400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171326001.123:61354): login pid=24400 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171326001.124:61355): user pid=24401 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171326001.125:61356): login pid=24401 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171326001.129:61357): user pid=24400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171326001.129:61358): user pid=24400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171326001.131:61359): user pid=24401 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171326001.131:61360): user pid=24401 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171326001.149:61361): user pid=24400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171326001.149:61362): user pid=24400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171326301.469:61363): user pid=24437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171326301.470:61364): login pid=24437 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171326301.473:61365): user pid=24437 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171326301.473:61366): user pid=24437 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171326601.811:61367): user pid=24475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171326601.811:61368): login pid=24475 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171326601.813:61369): user pid=24476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171326601.813:61370): login pid=24476 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171326601.815:61371): user pid=24475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171326601.815:61372): user pid=24475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171326601.820:61373): user pid=24476 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171326601.820:61374): user pid=24476 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171326601.838:61375): user pid=24475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171326601.838:61376): user pid=24475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171326737.356:61377): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171326737.356:61377): arch=c000003e syscall=2 success=yes exit=12 a0=34b5e40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171326737.356:61378): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171326737.356:61378): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171326737.356:61378): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171326737.982:61379): avc: denied { getattr } for pid=24507 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171326737.982:61379): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff8d056000 a2=7fff8d056000 a3=6c6280 items=0 ppid=6550 pid=24507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171326737.982:61379): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171326737.982:61380): avc: denied { read } for pid=24507 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171326737.982:61380): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=24507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171326741.893:61381): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171326741.893:61381): arch=c000003e syscall=86 success=yes exit=0 a0=33d49f0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171326741.893:61382): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171326741.893:61382): arch=c000003e syscall=87 success=yes exit=0 a0=33d49f0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171326901.154:61383): user pid=24530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171326901.154:61384): login pid=24530 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171326901.158:61385): user pid=24530 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171326901.158:61386): user pid=24530 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171326903.588:61387): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171326903.588:61387): arch=c000003e syscall=62 success=yes exit=0 a0=5fd1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171327201.485:61388): user pid=24566 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171327201.485:61389): login pid=24566 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171327201.486:61390): user pid=24567 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171327201.486:61391): login pid=24567 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171327201.491:61392): user pid=24566 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171327201.491:61393): user pid=24566 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171327201.497:61394): user pid=24567 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171327201.497:61395): user pid=24567 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171327201.513:61396): user pid=24566 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171327201.513:61397): user pid=24566 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171327501.828:61398): user pid=24604 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171327501.828:61399): login pid=24604 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171327501.832:61400): user pid=24604 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171327501.832:61401): user pid=24604 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171327608.832:61402): avc: denied { search } for pid=24630 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171327608.832:61402): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=24630 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171327608.833:61403): avc: denied { create } for pid=24630 comm="pyzor" name="HWRc32" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171327608.833:61403): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=24630 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171327608.833:61404): avc: denied { getattr } for pid=24630 comm="pyzor" name="HWRc32" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171327608.833:61404): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffa0446260 a2=7fffa0446260 a3=3 items=0 ppid=6550 pid=24630 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171327608.833:61404): path="/tmp/HWRc32" >type=AVC msg=audit(1171327608.834:61405): avc: denied { write } for pid=24630 comm="pyzor" name="HWRc32" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171327608.834:61405): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=24630 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171327608.834:61405): path="/tmp/HWRc32" >type=AVC msg=audit(1171327608.834:61406): avc: denied { unlink } for pid=24630 comm="pyzor" name="HWRc32" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171327608.834:61406): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=24630 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171327608.835:61407): avc: denied { read } for pid=24630 comm="pyzor" name="tmpxUJttc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171327608.835:61407): arch=c000003e syscall=0 success=yes exit=2581 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=24630 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171327608.835:61407): path=2F746D702F746D7078554A747463202864656C6574656429 >type=AVC msg=audit(1171327613.819:61408): avc: denied { write } for pid=24626 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171327613.819:61408): avc: denied { add_name } for pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171327613.819:61408): avc: denied { create } for pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171327613.819:61408): arch=c000003e syscall=2 success=yes exit=6 a0=61ff70 a1=c1 a2=124 a3=61ff70 items=0 ppid=24621 pid=24626 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171327613.819:61409): avc: denied { write } for pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171327613.819:61409): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61ff70 items=0 ppid=24621 pid=24626 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171327613.819:61409): path="/home/dhighley/_yAG.9pQ0FB.douglas" >type=AVC msg=audit(1171327613.820:61410): avc: denied { getattr } for pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171327613.820:61410): arch=c000003e syscall=4 success=yes exit=0 a0=61ff70 a1=7fff35ced6e0 a2=7fff35ced6e0 a3=61ff70 items=0 ppid=24621 pid=24626 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171327613.820:61410): path="/home/dhighley/_yAG.9pQ0FB.douglas" >type=AVC msg=audit(1171327613.820:61411): avc: denied { link } for pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171327613.820:61411): arch=c000003e syscall=86 success=yes exit=0 a0=61ff70 a1=61ff50 a2=7fff35ced600 a3=61ff70 items=0 ppid=24621 pid=24626 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171327613.820:61412): avc: denied { remove_name } for pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171327613.820:61412): avc: denied { unlink } for pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171327613.820:61412): arch=c000003e syscall=87 success=yes exit=0 a0=61ff70 a1=61ff50 a2=7fff35ced600 a3=61ff70 items=0 ppid=24621 pid=24626 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171327613.820:61413): avc: denied { append } for pid=24626 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171327613.820:61413): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=24621 pid=24626 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171327801.154:61414): user pid=24649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171327801.154:61415): login pid=24649 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171327801.156:61416): user pid=24650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171327801.156:61417): login pid=24650 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171327801.158:61418): user pid=24649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171327801.158:61419): user pid=24649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171327801.161:61420): user pid=24650 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171327801.161:61421): user pid=24650 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171327801.178:61422): user pid=24649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171327801.178:61423): user pid=24649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171328101.497:61424): user pid=24688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171328101.497:61425): login pid=24688 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171328101.499:61426): user pid=24688 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171328101.499:61427): user pid=24688 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171328401.828:61428): user pid=24722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171328401.828:61429): login pid=24722 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171328401.830:61430): user pid=24723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171328401.831:61431): login pid=24723 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171328401.832:61432): user pid=24722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171328401.832:61433): user pid=24722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171328401.838:61434): user pid=24723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171328401.838:61435): user pid=24723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171328401.851:61436): user pid=24722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171328401.851:61437): user pid=24722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171328461.171:61438): user pid=24739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171328461.171:61439): login pid=24739 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171328461.175:61440): user pid=24739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171328461.175:61441): user pid=24739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171328462.090:61442): user pid=24739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171328462.091:61443): user pid=24739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171328701.100:61444): user pid=24774 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171328701.101:61445): login pid=24774 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171328701.105:61446): user pid=24774 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171328701.105:61447): user pid=24774 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171329001.428:61448): user pid=24808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171329001.429:61449): login pid=24808 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171329001.430:61450): user pid=24809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171329001.430:61451): login pid=24809 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171329001.435:61452): user pid=24808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171329001.435:61453): user pid=24808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171329001.441:61454): user pid=24809 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171329001.441:61455): user pid=24809 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171329001.455:61456): user pid=24808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171329001.455:61457): user pid=24808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171329188.061:61458): user pid=23767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171329188.061:61459): user pid=23767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171329301.066:61460): user pid=24845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171329301.067:61461): login pid=24845 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171329301.071:61462): user pid=24845 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171329301.071:61463): user pid=24845 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171329601.404:61464): user pid=24879 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171329601.404:61465): login pid=24879 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171329601.405:61466): user pid=24880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171329601.405:61467): login pid=24880 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171329601.410:61468): user pid=24879 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171329601.410:61469): user pid=24879 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171329601.415:61470): user pid=24880 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171329601.415:61471): user pid=24880 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171329601.427:61472): user pid=24879 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171329601.428:61473): user pid=24879 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171329901.742:61474): user pid=24915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171329901.743:61475): login pid=24915 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171329901.745:61476): user pid=24915 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171329901.746:61477): user pid=24915 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171330201.079:61478): user pid=24951 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171330201.079:61479): login pid=24951 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171330201.081:61480): user pid=24952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171330201.081:61481): login pid=24952 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171330201.082:61482): user pid=24951 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171330201.082:61483): user pid=24951 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171330201.086:61484): user pid=24952 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171330201.086:61485): user pid=24952 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171330201.101:61486): user pid=24951 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171330201.102:61487): user pid=24951 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171330501.413:61488): user pid=24988 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171330501.413:61489): login pid=24988 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171330501.416:61490): user pid=24988 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171330501.416:61491): user pid=24988 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171330801.735:61492): user pid=25022 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171330801.735:61493): login pid=25022 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171330801.737:61494): user pid=25023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171330801.738:61495): login pid=25023 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171330801.739:61496): user pid=25022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171330801.739:61497): user pid=25022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171330801.745:61498): user pid=25023 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171330801.745:61499): user pid=25023 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171330801.759:61500): user pid=25022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171330801.760:61501): user pid=25022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171331101.074:61502): user pid=25064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171331101.075:61503): login pid=25064 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171331101.079:61504): user pid=25064 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171331101.079:61505): user pid=25064 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171331382.430:61506): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171331382.430:61506): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171331382.430:61506): path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.6550" >type=AVC msg=audit(1171331382.430:61507): avc: denied { link } for pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171331382.430:61507): arch=c000003e syscall=86 success=yes exit=0 a0=3290640 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171331382.431:61508): avc: denied { unlink } for pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171331382.431:61508): arch=c000003e syscall=87 success=yes exit=0 a0=3290640 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171331382.433:61509): avc: denied { setattr } for pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171331382.433:61509): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171331382.433:61510): avc: denied { rename } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171331382.433:61510): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171331389.035:61511): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171331389.035:61511): arch=c000003e syscall=1 success=yes exit=1440 a0=a a1=354cfd0 a2=5a0 a3=11 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171331389.035:61511): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171331389.689:61512): avc: denied { getattr } for pid=25105 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171331389.689:61512): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff021250d0 a2=7fff021250d0 a3=6c6280 items=0 ppid=6550 pid=25105 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171331389.689:61512): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171331389.689:61513): avc: denied { read } for pid=25105 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171331389.689:61513): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=25105 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171331389.690:61514): avc: denied { search } for pid=25105 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171331389.690:61514): avc: denied { write } for pid=25105 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171331389.690:61514): avc: denied { add_name } for pid=25105 comm="pyzor" name="rKIrn0" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171331389.690:61514): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=25105 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171331389.691:61515): avc: denied { remove_name } for pid=25105 comm="pyzor" name="rKIrn0" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171331389.691:61515): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=25105 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171331394.652:61516): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171331394.652:61516): arch=c000003e syscall=62 success=yes exit=0 a0=6211 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171331394.820:61517): avc: denied { write } for pid=25100 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171331394.820:61517): avc: denied { add_name } for pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171331394.820:61517): avc: denied { create } for pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171331394.820:61517): arch=c000003e syscall=2 success=yes exit=6 a0=61cc00 a1=c1 a2=124 a3=61cc00 items=0 ppid=25095 pid=25100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171331394.820:61518): avc: denied { write } for pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171331394.820:61518): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cc00 items=0 ppid=25095 pid=25100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171331394.820:61518): path="/home/dhighley/_MIG.ClR0FB.douglas" >type=AVC msg=audit(1171331394.821:61519): avc: denied { getattr } for pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171331394.821:61519): arch=c000003e syscall=4 success=yes exit=0 a0=61cc00 a1=7fff9ae33050 a2=7fff9ae33050 a3=61cc00 items=0 ppid=25095 pid=25100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171331394.821:61519): path="/home/dhighley/_MIG.ClR0FB.douglas" >type=AVC msg=audit(1171331394.821:61520): avc: denied { link } for pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171331394.821:61520): arch=c000003e syscall=86 success=yes exit=0 a0=61cc00 a1=61b520 a2=7fff9ae32f70 a3=61cc00 items=0 ppid=25095 pid=25100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171331394.821:61521): avc: denied { remove_name } for pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171331394.821:61521): avc: denied { unlink } for pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171331394.821:61521): arch=c000003e syscall=87 success=yes exit=0 a0=61cc00 a1=61b520 a2=7fff9ae32f70 a3=61cc00 items=0 ppid=25095 pid=25100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171331401.402:61522): user pid=25108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171331401.402:61523): login pid=25108 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171331401.405:61524): user pid=25109 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171331401.405:61525): login pid=25109 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171331401.407:61526): user pid=25108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171331401.407:61527): user pid=25108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171331401.412:61528): user pid=25109 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171331401.412:61529): user pid=25109 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171331401.427:61530): user pid=25108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171331401.428:61531): user pid=25108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171331701.738:61532): user pid=25150 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171331701.739:61533): login pid=25150 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171331701.741:61534): user pid=25150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171331701.742:61535): user pid=25150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171332001.077:61536): user pid=25186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171332001.077:61537): login pid=25186 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171332001.079:61538): user pid=25187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171332001.079:61539): login pid=25187 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171332001.081:61540): user pid=25188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171332001.082:61541): login pid=25188 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171332001.082:61542): user pid=25186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171332001.082:61543): user pid=25186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171332001.084:61544): user pid=25187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171332001.084:61545): user pid=25187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171332001.101:61546): user pid=25188 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171332001.101:61547): user pid=25188 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171332001.107:61548): user pid=25186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171332001.107:61549): user pid=25186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171332061.417:61550): user pid=25207 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171332061.417:61551): login pid=25207 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171332061.421:61552): user pid=25207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171332061.421:61553): user pid=25207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171332062.338:61554): user pid=25207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171332062.339:61555): user pid=25207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171332301.345:61556): user pid=25242 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171332301.345:61557): login pid=25242 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171332301.350:61558): user pid=25242 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171332301.350:61559): user pid=25242 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171332601.685:61560): user pid=25284 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171332601.685:61561): login pid=25284 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171332601.688:61562): user pid=25285 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171332601.688:61563): login pid=25285 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171332601.691:61564): user pid=25284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171332601.691:61565): user pid=25284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171332601.693:61566): user pid=25285 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171332601.693:61567): user pid=25285 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171332601.713:61568): user pid=25284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171332601.713:61569): user pid=25284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171332835.653:61570): avc: denied { search } for pid=25326 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171332835.653:61570): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=25326 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171332901.033:61571): user pid=25332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171332901.033:61572): login pid=25332 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171332901.035:61573): user pid=25332 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171332901.035:61574): user pid=25332 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171333201.362:61575): user pid=25367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171333201.362:61576): login pid=25367 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171333201.365:61577): user pid=25368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171333201.365:61578): login pid=25368 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171333201.368:61579): user pid=25367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171333201.368:61580): user pid=25367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171333201.370:61581): user pid=25368 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171333201.370:61582): user pid=25368 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171333201.393:61583): user pid=25367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171333201.393:61584): user pid=25367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171333501.708:61585): user pid=25407 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171333501.708:61586): login pid=25407 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171333501.713:61587): user pid=25407 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171333501.713:61588): user pid=25407 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171333801.034:61589): user pid=25442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171333801.034:61590): login pid=25442 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171333801.036:61591): user pid=25443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171333801.037:61592): login pid=25443 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171333801.040:61593): user pid=25442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171333801.040:61594): user pid=25442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171333801.042:61595): user pid=25443 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171333801.042:61596): user pid=25443 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171333801.063:61597): user pid=25442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171333801.063:61598): user pid=25442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171334101.375:61599): user pid=25479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171334101.375:61600): login pid=25479 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171334101.379:61601): user pid=25479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171334101.379:61602): user pid=25479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171334168.128:61603): avc: denied { search } for pid=25504 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171334168.128:61603): avc: denied { write } for pid=25504 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171334168.128:61603): avc: denied { add_name } for pid=25504 comm="pyzor" name="HnUMH7" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171334168.128:61603): avc: denied { create } for pid=25504 comm="pyzor" name="HnUMH7" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171334168.128:61603): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=25504 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171334168.129:61604): avc: denied { getattr } for pid=25504 comm="pyzor" name="HnUMH7" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171334168.129:61604): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff206efb90 a2=7fff206efb90 a3=3 items=0 ppid=6550 pid=25504 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171334168.129:61604): path="/tmp/HnUMH7" >type=AVC msg=audit(1171334168.129:61605): avc: denied { write } for pid=25504 comm="pyzor" name="HnUMH7" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171334168.129:61605): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=6550 pid=25504 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171334168.129:61605): path="/tmp/HnUMH7" >type=AVC msg=audit(1171334168.129:61606): avc: denied { remove_name } for pid=25504 comm="pyzor" name="HnUMH7" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171334168.129:61606): avc: denied { unlink } for pid=25504 comm="pyzor" name="HnUMH7" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171334168.129:61606): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=25504 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171334168.131:61607): avc: denied { read } for pid=25504 comm="pyzor" name="tmpoVrAre" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171334168.131:61607): arch=c000003e syscall=0 success=yes exit=1092 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=25504 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171334168.131:61607): path=2F746D702F746D706F5672417265202864656C6574656429 >type=AVC msg=audit(1171334173.665:61608): avc: denied { write } for pid=25500 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171334173.665:61608): avc: denied { add_name } for pid=25500 comm="procmail" name="_cOG.dQS0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171334173.665:61608): arch=c000003e syscall=2 success=yes exit=6 a0=61ca90 a1=c1 a2=124 a3=61ca90 items=0 ppid=25495 pid=25500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171334173.666:61609): avc: denied { remove_name } for pid=25500 comm="procmail" name="_cOG.dQS0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171334173.666:61609): arch=c000003e syscall=87 success=yes exit=0 a0=61ca90 a1=61b520 a2=7fffb6f79890 a3=61ca90 items=0 ppid=25495 pid=25500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171334173.666:61610): avc: denied { append } for pid=25500 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171334173.666:61610): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=25495 pid=25500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171334401.706:61611): user pid=25524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171334401.706:61612): login pid=25524 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171334401.708:61613): user pid=25525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171334401.708:61614): login pid=25525 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171334401.712:61615): user pid=25524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171334401.712:61616): user pid=25524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171334401.715:61617): user pid=25525 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171334401.715:61618): user pid=25525 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171334401.733:61619): user pid=25524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171334401.733:61620): user pid=25524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171334415.269:61621): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171334415.269:61621): arch=c000003e syscall=2 success=yes exit=9 a0=347f590 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171334415.912:61622): avc: denied { getattr } for pid=25545 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171334415.912:61622): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff7509f040 a2=7fff7509f040 a3=6c6280 items=0 ppid=6550 pid=25545 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171334415.912:61622): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171334415.912:61623): avc: denied { read } for pid=25545 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171334415.912:61623): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=25545 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171334420.875:61624): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171334420.875:61624): arch=c000003e syscall=62 success=yes exit=0 a0=63c9 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171334421.150:61625): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171334421.150:61625): arch=c000003e syscall=2 success=yes exit=9 a0=31a18d0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171334421.162:61626): avc: denied { create } for pid=25541 comm="procmail" name="_FPG.VUS0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171334421.162:61626): arch=c000003e syscall=2 success=yes exit=6 a0=61df60 a1=c1 a2=124 a3=61df60 items=0 ppid=25538 pid=25541 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171334421.162:61627): avc: denied { write } for pid=25541 comm="procmail" name="_FPG.VUS0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171334421.162:61627): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61df60 items=0 ppid=25538 pid=25541 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171334421.162:61627): path="/home/dhighley/_FPG.VUS0FB.douglas" >type=AVC msg=audit(1171334421.162:61628): avc: denied { getattr } for pid=25541 comm="procmail" name="_FPG.VUS0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171334421.162:61628): arch=c000003e syscall=4 success=yes exit=0 a0=61df60 a1=7fff3aa76470 a2=7fff3aa76470 a3=61df60 items=0 ppid=25538 pid=25541 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171334421.162:61628): path="/home/dhighley/_FPG.VUS0FB.douglas" >type=AVC msg=audit(1171334421.163:61629): avc: denied { link } for pid=25541 comm="procmail" name="_FPG.VUS0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171334421.163:61629): arch=c000003e syscall=86 success=yes exit=0 a0=61df60 a1=61b510 a2=7fff3aa76390 a3=61df60 items=0 ppid=25538 pid=25541 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171334421.163:61630): avc: denied { unlink } for pid=25541 comm="procmail" name="_FPG.VUS0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171334421.163:61630): arch=c000003e syscall=87 success=yes exit=0 a0=61df60 a1=61b510 a2=7fff3aa76390 a3=61df60 items=0 ppid=25538 pid=25541 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171334699.925:61631): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171334699.925:61631): arch=c000003e syscall=2 success=yes exit=12 a0=3346ae0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171334699.925:61632): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171334699.925:61632): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171334699.925:61632): path="/home/dhighley/.spamassassin/bayes_journal" >type=USER_ACCT msg=audit(1171334701.054:61633): user pid=25585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171334701.054:61634): login pid=25585 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171334701.057:61635): user pid=25585 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171334701.057:61636): user pid=25585 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171334705.489:61637): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171334705.489:61637): arch=c000003e syscall=86 success=yes exit=0 a0=2fbd290 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171334705.489:61638): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171334705.489:61638): arch=c000003e syscall=87 success=yes exit=0 a0=2fbd290 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171335001.394:61639): user pid=25620 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171335001.395:61640): login pid=25620 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171335001.396:61641): user pid=25619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171335001.396:61642): login pid=25619 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171335001.399:61643): user pid=25619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171335001.399:61644): user pid=25619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171335001.404:61645): user pid=25620 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171335001.404:61646): user pid=25620 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171335001.425:61647): user pid=25619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171335001.425:61648): user pid=25619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171335064.901:61649): avc: denied { getattr } for pid=25645 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171335064.901:61649): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff5c771720 a2=7fff5c771720 a3=6c6280 items=0 ppid=6550 pid=25645 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171335064.901:61649): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171335064.901:61650): avc: denied { read } for pid=25645 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171335064.901:61650): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=25645 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171335069.977:61651): avc: denied { append } for pid=25641 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171335069.977:61651): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=25636 pid=25641 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171335069.977:61652): avc: denied { lock } for pid=25641 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171335069.977:61652): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=25636 pid=25641 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171335069.977:61652): path="/home/phighley/spamlog" >type=USER_ACCT msg=audit(1171335301.742:61653): user pid=25680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171335301.742:61654): login pid=25680 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171335301.745:61655): user pid=25680 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171335301.745:61656): user pid=25680 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171335601.065:61657): user pid=25722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171335601.065:61658): login pid=25722 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171335601.067:61659): user pid=25723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171335601.068:61660): login pid=25723 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171335601.071:61661): user pid=25722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171335601.071:61662): user pid=25722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171335601.073:61663): user pid=25723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171335601.073:61664): user pid=25723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171335601.093:61665): user pid=25722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171335601.093:61666): user pid=25722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171335661.397:61667): user pid=25740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171335661.398:61668): login pid=25740 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171335661.401:61669): user pid=25740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171335661.401:61670): user pid=25740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171335662.314:61671): user pid=25740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171335662.314:61672): user pid=25740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171335901.321:61673): user pid=25781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171335901.321:61674): login pid=25781 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171335901.324:61675): user pid=25781 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171335901.324:61676): user pid=25781 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171336201.646:61677): user pid=25824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171336201.647:61678): login pid=25824 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171336201.648:61679): user pid=25825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171336201.648:61680): login pid=25825 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171336201.653:61681): user pid=25824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171336201.653:61682): user pid=25824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171336201.657:61683): user pid=25825 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171336201.657:61684): user pid=25825 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171336201.683:61685): user pid=25824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171336201.683:61686): user pid=25824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171336501.985:61687): user pid=25861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171336501.985:61688): login pid=25861 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171336501.989:61689): user pid=25861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171336501.989:61690): user pid=25861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171336664.936:61691): avc: denied { search } for pid=25893 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171336664.936:61691): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=25893 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171336664.937:61692): avc: denied { search } for pid=25893 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171336664.937:61692): avc: denied { write } for pid=25893 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171336664.937:61692): avc: denied { add_name } for pid=25893 comm="pyzor" name="n1cLM1" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171336664.937:61692): avc: denied { create } for pid=25893 comm="pyzor" name="n1cLM1" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171336664.937:61692): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=25893 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171336664.937:61693): avc: denied { getattr } for pid=25893 comm="pyzor" name="n1cLM1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171336664.937:61693): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff2145b8f0 a2=7fff2145b8f0 a3=3 items=0 ppid=6550 pid=25893 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171336664.937:61693): path="/tmp/n1cLM1" >type=AVC msg=audit(1171336664.937:61694): avc: denied { write } for pid=25893 comm="pyzor" name="n1cLM1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171336664.937:61694): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=25893 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171336664.937:61694): path="/tmp/n1cLM1" >type=AVC msg=audit(1171336664.937:61695): avc: denied { remove_name } for pid=25893 comm="pyzor" name="n1cLM1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171336664.937:61695): avc: denied { unlink } for pid=25893 comm="pyzor" name="n1cLM1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171336664.937:61695): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=25893 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171336664.939:61696): avc: denied { read } for pid=25893 comm="pyzor" name="tmpS1-rTu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171336664.939:61696): arch=c000003e syscall=0 success=yes exit=2143 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8774 items=0 ppid=6550 pid=25893 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171336664.939:61696): path=2F746D702F746D7053312D725475202864656C6574656429 >type=AVC msg=audit(1171336668.517:61697): avc: denied { append } for pid=25889 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171336668.517:61697): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=25884 pid=25889 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171336801.326:61698): user pid=25904 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171336801.326:61699): login pid=25904 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171336801.329:61700): user pid=25905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171336801.329:61701): login pid=25905 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171336801.329:61702): user pid=25904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171336801.330:61703): user pid=25904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171336801.333:61704): user pid=25905 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171336801.333:61705): user pid=25905 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171336801.353:61706): user pid=25904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171336801.353:61707): user pid=25904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171336945.919:61708): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171336945.919:61708): arch=c000003e syscall=62 success=yes exit=0 a0=6550 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171336946.430:61709): avc: denied { write } for pid=25932 comm="procmail" name="phighley" dev=dm-0 ino=12485733 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171336946.430:61709): avc: denied { add_name } for pid=25932 comm="procmail" name="_MVG.y7S0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171336946.430:61709): arch=c000003e syscall=2 success=yes exit=6 a0=61b490 a1=c1 a2=124 a3=61b490 items=0 ppid=25927 pid=25932 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171336946.430:61710): avc: denied { remove_name } for pid=25932 comm="procmail" name="_MVG.y7S0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171336946.430:61710): arch=c000003e syscall=87 success=yes exit=0 a0=61b490 a1=624060 a2=7fff3284fba0 a3=61b490 items=0 ppid=25927 pid=25932 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171336953.644:61711): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171336953.644:61711): arch=c000003e syscall=2 success=yes exit=9 a0=35709d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171336954.164:61712): avc: denied { getattr } for pid=25946 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171336954.164:61712): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff4d2081b0 a2=7fff4d2081b0 a3=6c6280 items=0 ppid=6550 pid=25946 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171336954.164:61712): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171336954.164:61713): avc: denied { read } for pid=25946 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171336954.164:61713): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=25946 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171336959.149:61714): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171336959.149:61714): arch=c000003e syscall=2 success=yes exit=9 a0=356e4e0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171337101.667:61715): user pid=25974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171337101.667:61716): login pid=25974 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171337101.671:61717): user pid=25974 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171337101.672:61718): user pid=25974 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171337401.999:61719): user pid=26015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171337401.999:61720): login pid=26015 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171337402.002:61721): user pid=26016 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171337402.002:61722): login pid=26016 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171337402.006:61723): user pid=26015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171337402.006:61724): user pid=26015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171337402.009:61725): user pid=26016 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171337402.009:61726): user pid=26016 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171337402.029:61727): user pid=26015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171337402.029:61728): user pid=26015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171337517.146:61729): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171337517.146:61729): arch=c000003e syscall=2 success=yes exit=12 a0=34189e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171337517.146:61730): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171337517.146:61730): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171337517.146:61730): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171337522.750:61731): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171337522.750:61731): arch=c000003e syscall=86 success=yes exit=0 a0=31e80c0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171337522.751:61732): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171337522.751:61732): arch=c000003e syscall=87 success=yes exit=0 a0=31e80c0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171337522.795:61733): avc: denied { create } for pid=26043 comm="procmail" name="_7WG.yET0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171337522.795:61733): arch=c000003e syscall=2 success=yes exit=6 a0=61c980 a1=c1 a2=124 a3=61c980 items=0 ppid=26038 pid=26043 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171337522.795:61734): avc: denied { write } for pid=26043 comm="procmail" name="_7WG.yET0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171337522.795:61734): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c980 items=0 ppid=26038 pid=26043 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171337522.795:61734): path="/home/dhighley/_7WG.yET0FB.douglas" >type=AVC msg=audit(1171337522.795:61735): avc: denied { getattr } for pid=26043 comm="procmail" name="_7WG.yET0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171337522.795:61735): arch=c000003e syscall=4 success=yes exit=0 a0=61c980 a1=7fffab40fe10 a2=7fffab40fe10 a3=61c980 items=0 ppid=26038 pid=26043 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171337522.795:61735): path="/home/dhighley/_7WG.yET0FB.douglas" >type=AVC msg=audit(1171337522.795:61736): avc: denied { link } for pid=26043 comm="procmail" name="_7WG.yET0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171337522.795:61736): arch=c000003e syscall=86 success=yes exit=0 a0=61c980 a1=61b510 a2=7fffab40fd30 a3=61c980 items=0 ppid=26038 pid=26043 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171337522.796:61737): avc: denied { unlink } for pid=26043 comm="procmail" name="_7WG.yET0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171337522.796:61737): arch=c000003e syscall=87 success=yes exit=0 a0=61c980 a1=61b510 a2=7fffab40fd30 a3=61c980 items=0 ppid=26038 pid=26043 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171337701.350:61738): user pid=26062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171337701.350:61739): login pid=26062 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171337701.354:61740): user pid=26062 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171337701.354:61741): user pid=26062 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171338001.679:61742): user pid=26098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171338001.679:61743): login pid=26098 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171338001.680:61744): user pid=26099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171338001.680:61745): login pid=26099 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171338001.685:61746): user pid=26098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171338001.685:61747): user pid=26098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171338001.686:61748): user pid=26099 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171338001.688:61749): user pid=26099 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171338001.715:61750): user pid=26098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171338001.715:61751): user pid=26098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171338301.017:61752): user pid=26135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171338301.017:61753): login pid=26135 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171338301.021:61754): user pid=26135 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171338301.021:61755): user pid=26135 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171338601.357:61756): user pid=26169 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171338601.358:61757): login pid=26169 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171338601.358:61758): user pid=26168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171338601.358:61759): login pid=26168 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171338601.362:61760): user pid=26168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171338601.362:61761): user pid=26168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171338601.364:61762): user pid=26169 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171338601.364:61763): user pid=26169 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171338601.381:61764): user pid=26168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171338601.381:61765): user pid=26168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171338901.697:61766): user pid=26208 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171338901.698:61767): login pid=26208 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171338901.700:61768): user pid=26208 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171338901.700:61769): user pid=26208 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171339201.028:61770): user pid=26248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171339201.028:61771): login pid=26248 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171339201.031:61772): user pid=26249 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171339201.031:61773): login pid=26249 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171339201.032:61774): user pid=26248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171339201.032:61775): user pid=26248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171339201.034:61776): user pid=26249 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171339201.034:61777): user pid=26249 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171339201.053:61778): user pid=26248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171339201.054:61779): user pid=26248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171339261.368:61780): user pid=26266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171339261.368:61781): login pid=26266 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171339261.371:61782): user pid=26266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171339261.371:61783): user pid=26266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171339262.251:61784): user pid=26266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171339262.252:61785): user pid=26266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171339322.670:61786): avc: denied { search } for pid=26297 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171339322.670:61786): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=26297 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171339322.670:61787): avc: denied { create } for pid=26297 comm="pyzor" name="8JI-6g" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171339322.670:61787): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=26297 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171339322.671:61788): avc: denied { getattr } for pid=26297 comm="pyzor" name="8JI-6g" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171339322.671:61788): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd15e2e90 a2=7fffd15e2e90 a3=2 items=0 ppid=6550 pid=26297 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171339322.671:61788): path="/tmp/8JI-6g" >type=AVC msg=audit(1171339322.671:61789): avc: denied { write } for pid=26297 comm="pyzor" name="8JI-6g" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171339322.671:61789): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=6550 pid=26297 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171339322.671:61789): path="/tmp/8JI-6g" >type=AVC msg=audit(1171339322.671:61790): avc: denied { unlink } for pid=26297 comm="pyzor" name="8JI-6g" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171339322.671:61790): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6c6280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=26297 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171339322.673:61791): avc: denied { read } for pid=26297 comm="pyzor" name="tmpog9fEZ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171339322.673:61791): arch=c000003e syscall=0 success=yes exit=222 a0=4 a1=2aaaaf34d000 a2=1000 a3=20 items=0 ppid=6550 pid=26297 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171339322.673:61791): path=2F746D702F746D706F673966455A202864656C6574656429 >type=AVC msg=audit(1171339327.657:61792): avc: denied { append } for pid=26293 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171339327.657:61792): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26288 pid=26293 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171339501.259:61793): user pid=26312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171339501.259:61794): login pid=26312 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171339501.262:61795): user pid=26312 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171339501.262:61796): user pid=26312 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171339801.596:61797): user pid=26348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171339801.597:61798): login pid=26348 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171339801.599:61799): user pid=26349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171339801.599:61800): login pid=26349 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171339801.600:61801): user pid=26348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171339801.600:61802): user pid=26348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171339801.607:61803): user pid=26349 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171339801.607:61804): user pid=26349 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171339801.622:61805): user pid=26348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171339801.622:61806): user pid=26348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171339987.223:61807): user pid=25187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171339987.224:61808): user pid=25187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171340101.229:61809): user pid=26387 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171340101.229:61810): login pid=26387 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171340101.233:61811): user pid=26387 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171340101.233:61812): user pid=26387 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171340401.554:61813): user pid=26421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171340401.554:61814): login pid=26421 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171340401.556:61815): user pid=26422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171340401.556:61816): login pid=26422 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171340401.558:61817): user pid=26421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171340401.558:61818): user pid=26421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171340401.563:61819): user pid=26422 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171340401.563:61820): user pid=26422 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171340401.588:61821): user pid=26421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171340401.589:61822): user pid=26421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171340461.345:61823): avc: denied { search } for pid=26447 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171340461.345:61823): avc: denied { write } for pid=26447 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171340461.345:61823): avc: denied { add_name } for pid=26447 comm="pyzor" name="_h2hTs" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171340461.345:61823): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=26447 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171340461.345:61824): avc: denied { remove_name } for pid=26447 comm="pyzor" name="_h2hTs" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171340461.345:61824): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=26447 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171340466.308:61825): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171340466.308:61825): arch=c000003e syscall=62 success=yes exit=0 a0=674f a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171340466.477:61826): avc: denied { write } for pid=26443 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171340466.477:61826): avc: denied { add_name } for pid=26443 comm="procmail" name="_LdG.yyT0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171340466.477:61826): arch=c000003e syscall=2 success=yes exit=6 a0=61ca20 a1=c1 a2=124 a3=61ca20 items=0 ppid=26438 pid=26443 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171340466.478:61827): avc: denied { remove_name } for pid=26443 comm="procmail" name="_LdG.yyT0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171340466.478:61827): arch=c000003e syscall=87 success=yes exit=0 a0=61ca20 a1=61b520 a2=7fff56a4a380 a3=61ca20 items=0 ppid=26438 pid=26443 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171340701.890:61828): user pid=26470 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171340701.891:61829): login pid=26470 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171340701.895:61830): user pid=26470 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171340701.895:61831): user pid=26470 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171340702.220:61832): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171340702.220:61832): arch=c000003e syscall=2 success=yes exit=12 a0=33464a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171340702.220:61833): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171340702.220:61833): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=2 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171340702.220:61833): path="/home/phighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171340702.225:61834): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=12487199 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171340702.225:61834): arch=c000003e syscall=2 success=yes exit=9 a0=32a2240 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171340702.755:61835): avc: denied { getattr } for pid=26489 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171340702.755:61835): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb173b6e0 a2=7fffb173b6e0 a3=6c6280 items=0 ppid=6550 pid=26489 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171340702.755:61835): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171340702.755:61836): avc: denied { read } for pid=26489 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171340702.755:61836): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=26489 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171340707.838:61837): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171340707.838:61837): arch=c000003e syscall=86 success=yes exit=0 a0=32c7330 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171340707.838:61838): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171340707.838:61838): arch=c000003e syscall=87 success=yes exit=0 a0=32c7330 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171340707.839:61839): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=12487184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171340707.839:61839): arch=c000003e syscall=2 success=yes exit=9 a0=3425ac0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171340707.880:61840): avc: denied { create } for pid=26484 comm="procmail" name="_0dG.j2T0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171340707.880:61840): arch=c000003e syscall=2 success=yes exit=6 a0=61c890 a1=c1 a2=124 a3=61c890 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171340707.880:61841): avc: denied { write } for pid=26484 comm="procmail" name="_0dG.j2T0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171340707.880:61841): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c890 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171340707.880:61841): path="/home/phighley/_0dG.j2T0FB.douglas" >type=AVC msg=audit(1171340707.880:61842): avc: denied { getattr } for pid=26484 comm="procmail" name="_0dG.j2T0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171340707.880:61842): arch=c000003e syscall=4 success=yes exit=0 a0=61c890 a1=7fffff0c7ab0 a2=7fffff0c7ab0 a3=61c890 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171340707.880:61842): path="/home/phighley/_0dG.j2T0FB.douglas" >type=AVC msg=audit(1171340707.881:61843): avc: denied { link } for pid=26484 comm="procmail" name="_0dG.j2T0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171340707.881:61843): arch=c000003e syscall=86 success=yes exit=0 a0=61c890 a1=61b530 a2=7fffff0c79d0 a3=61c890 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171340707.881:61844): avc: denied { unlink } for pid=26484 comm="procmail" name="_0dG.j2T0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171340707.881:61844): arch=c000003e syscall=87 success=yes exit=0 a0=61c890 a1=61b530 a2=7fffff0c79d0 a3=61c890 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171340707.881:61845): avc: denied { append } for pid=26484 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171340707.881:61845): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171340707.881:61846): avc: denied { lock } for pid=26484 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171340707.881:61846): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171340707.881:61846): path="/home/phighley/spamlog" >type=USER_ACCT msg=audit(1171341001.251:61847): user pid=26516 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171341001.251:61848): login pid=26516 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171341001.253:61849): user pid=26517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171341001.254:61850): login pid=26517 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171341001.254:61851): user pid=26516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171341001.254:61852): user pid=26516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171341001.259:61853): user pid=26517 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171341001.259:61854): user pid=26517 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171341001.275:61855): user pid=26516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171341001.275:61856): user pid=26516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171341301.585:61857): user pid=26554 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171341301.585:61858): login pid=26554 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171341301.590:61859): user pid=26554 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171341301.590:61860): user pid=26554 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171341601.918:61861): user pid=26587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171341601.918:61862): login pid=26587 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171341601.921:61863): user pid=26588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171341601.921:61864): login pid=26588 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171341601.923:61865): user pid=26587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171341601.923:61866): user pid=26587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171341601.933:61867): user pid=26588 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171341601.933:61868): user pid=26588 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171341601.943:61869): user pid=26587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171341601.943:61870): user pid=26587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171341901.269:61871): user pid=26624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171341901.269:61872): login pid=26624 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171341901.273:61873): user pid=26624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171341901.273:61874): user pid=26624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171341972.450:61875): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1171341972.450:61876): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1171341982.513:61877): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171341982.514:61878): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171341982.523:61879): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171341982.527:61880): login pid=3672 uid=0 old auid=1000 new auid=1000 >type=USER_START msg=audit(1171341982.537:61881): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171341982.537:61882): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171342201.602:61883): user pid=26898 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171342201.603:61884): user pid=26899 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171342201.603:61885): login pid=26898 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171342201.603:61886): login pid=26899 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171342201.608:61887): user pid=26898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171342201.609:61888): user pid=26898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171342201.609:61889): user pid=26899 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171342201.609:61890): user pid=26899 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171342201.637:61891): user pid=26898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171342201.638:61892): user pid=26898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171342501.959:61893): user pid=26974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171342501.959:61894): login pid=26974 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171342501.963:61895): user pid=26974 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171342501.963:61896): user pid=26974 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171342687.717:61897): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171342687.717:61897): arch=c000003e syscall=2 success=yes exit=12 a0=3347180 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171342687.717:61898): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171342687.717:61898): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171342687.717:61898): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171342687.724:61899): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171342687.724:61899): arch=c000003e syscall=2 success=yes exit=9 a0=35723d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171342688.378:61900): avc: denied { search } for pid=27014 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171342688.378:61900): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171342688.378:61901): avc: denied { getattr } for pid=27014 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171342688.378:61901): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9c9ce970 a2=7fff9c9ce970 a3=6c6280 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171342688.378:61901): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171342688.378:61902): avc: denied { read } for pid=27014 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171342688.378:61902): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171342688.379:61903): avc: denied { search } for pid=27014 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171342688.379:61903): avc: denied { write } for pid=27014 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171342688.379:61903): avc: denied { add_name } for pid=27014 comm="pyzor" name="RHDdV3" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171342688.379:61903): avc: denied { create } for pid=27014 comm="pyzor" name="RHDdV3" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171342688.379:61903): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171342688.380:61904): avc: denied { getattr } for pid=27014 comm="pyzor" name="RHDdV3" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171342688.380:61904): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff9c9cce60 a2=7fff9c9cce60 a3=3 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171342688.380:61904): path="/tmp/RHDdV3" >type=AVC msg=audit(1171342688.380:61905): avc: denied { write } for pid=27014 comm="pyzor" name="RHDdV3" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171342688.380:61905): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171342688.380:61905): path="/tmp/RHDdV3" >type=AVC msg=audit(1171342688.380:61906): avc: denied { remove_name } for pid=27014 comm="pyzor" name="RHDdV3" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171342688.380:61906): avc: denied { unlink } for pid=27014 comm="pyzor" name="RHDdV3" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171342688.380:61906): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171342688.381:61907): avc: denied { read } for pid=27014 comm="pyzor" name="tmpK7nTOg" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171342688.381:61907): arch=c000003e syscall=0 success=yes exit=276 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171342688.381:61907): path=2F746D702F746D704B376E544F67202864656C6574656429 >type=AVC msg=audit(1171342693.340:61908): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171342693.340:61908): arch=c000003e syscall=62 success=yes exit=0 a0=6986 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171342693.354:61909): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634218 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171342693.354:61909): arch=c000003e syscall=86 success=yes exit=0 a0=31dc2d0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171342693.354:61910): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634218 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171342693.354:61910): arch=c000003e syscall=87 success=yes exit=0 a0=31dc2d0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171342693.355:61911): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171342693.355:61911): arch=c000003e syscall=2 success=yes exit=9 a0=3359cd0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171342693.374:61912): avc: denied { write } for pid=27010 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171342693.374:61912): avc: denied { add_name } for pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171342693.374:61912): avc: denied { create } for pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171342693.374:61912): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=27007 pid=27010 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171342693.375:61913): avc: denied { write } for pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171342693.375:61913): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b670 items=0 ppid=27007 pid=27010 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171342693.375:61913): path="/home/dhighley/_CmG.lVU0FB.douglas" >type=AVC msg=audit(1171342693.375:61914): avc: denied { getattr } for pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171342693.375:61914): arch=c000003e syscall=4 success=yes exit=0 a0=61b670 a1=7fff21afe4f0 a2=7fff21afe4f0 a3=61b670 items=0 ppid=27007 pid=27010 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171342693.375:61914): path="/home/dhighley/_CmG.lVU0FB.douglas" >type=AVC msg=audit(1171342693.375:61915): avc: denied { link } for pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171342693.375:61915): arch=c000003e syscall=86 success=yes exit=0 a0=61b670 a1=61cc60 a2=7fff21afe410 a3=61b670 items=0 ppid=27007 pid=27010 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171342693.375:61916): avc: denied { remove_name } for pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171342693.375:61916): avc: denied { unlink } for pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171342693.375:61916): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61cc60 a2=7fff21afe410 a3=61b670 items=0 ppid=27007 pid=27010 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171342693.375:61917): avc: denied { append } for pid=27010 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171342693.375:61917): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=27007 pid=27010 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1171342697.842:61918): user pid=27017 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171342697.842:61919): user pid=27017 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1171342697.852:61920): user pid=27017 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1171342697.852:61921): user pid=27017 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1171342714.960:61922): user pid=27084 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1171342714.960:61923): user pid=27084 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1171342714.980:61924): user pid=27084 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1171342714.980:61925): user pid=27084 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1171342738.171:61926): user pid=27157 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1171342738.171:61927): user pid=27157 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1171342738.180:61928): user pid=27157 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1171342738.181:61929): user pid=27157 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1171342763.207:61930): user pid=27226 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1171342763.207:61931): user pid=27226 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1171342763.216:61932): user pid=27226 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1171342763.217:61933): user pid=27226 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1171342788.803:61934): user pid=27303 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171342788.803:61935): user pid=27303 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171342801.295:61936): user pid=27309 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171342801.295:61937): user pid=27308 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171342801.296:61938): login pid=27309 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171342801.296:61939): login pid=27308 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171342801.298:61940): user pid=27310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171342801.299:61941): login pid=27310 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171342801.302:61942): user pid=27309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171342801.303:61943): user pid=27309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171342801.305:61944): user pid=27308 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171342801.305:61945): user pid=27308 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171342801.309:61946): user pid=27310 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171342801.309:61947): user pid=27310 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171342801.342:61948): user pid=27308 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171342801.342:61949): user pid=27308 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171342842.423:61950): avc: denied { lock } for pid=27304 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171342842.423:61950): arch=c000003e syscall=72 success=yes exit=0 a0=9 a1=7 a2=7fff553c58d0 a3=3 items=0 ppid=3104 pid=27304 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null) >type=AVC_PATH msg=audit(1171342842.423:61950): path="/home/dhighley/Mail/Trash" >type=AVC msg=audit(1171342842.561:61951): avc: denied { setattr } for pid=27304 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171342842.561:61951): arch=c000003e syscall=132 success=yes exit=0 a0=6b4858 a1=7fff553c5b80 a2=0 a3=0 items=0 ppid=3104 pid=27304 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null) >type=USER_ACCT msg=audit(1171342861.651:61952): user pid=27351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171342861.652:61953): login pid=27351 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171342861.657:61954): user pid=27351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171342861.657:61955): user pid=27351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171342862.580:61956): user pid=27351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171342862.581:61957): user pid=27351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171342883.148:61958): user pid=27369 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171342883.148:61959): user pid=27369 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171343101.589:61960): user pid=27397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171343101.589:61961): login pid=27397 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171343101.593:61962): user pid=27397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171343101.594:61963): user pid=27397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171343401.937:61964): user pid=27434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171343401.937:61965): login pid=27434 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171343401.939:61966): user pid=27435 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171343401.939:61967): login pid=27435 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171343401.941:61968): user pid=27434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171343401.941:61969): user pid=27434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171343401.946:61970): user pid=27435 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171343401.946:61971): user pid=27435 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171343401.970:61972): user pid=27434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171343401.970:61973): user pid=27434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171343701.287:61974): user pid=27471 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171343701.287:61975): login pid=27471 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171343701.291:61976): user pid=27471 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171343701.291:61977): user pid=27471 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171343709.301:61978): avc: denied { getattr } for pid=27518 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171343709.301:61978): arch=c000003e syscall=4 success=yes exit=0 a0=8c4490 a1=7fffa63559a0 a2=7fffa63559a0 a3=3 items=0 ppid=30538 pid=27518 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171343709.301:61978): path="/bin/hostname" >type=AVC msg=audit(1171343709.301:61979): avc: denied { execute } for pid=27518 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171343709.301:61979): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=1 a2=0 a3=3 items=0 ppid=30538 pid=27518 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1171343709.301:61980): avc: denied { read } for pid=27518 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171343709.301:61980): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=4 a2=0 a3=3 items=0 ppid=30538 pid=27518 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1171343709.301:61981): avc: denied { execute_no_trans } for pid=27518 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171343709.301:61981): arch=c000003e syscall=59 success=yes exit=0 a0=8c4490 a1=8c4bc0 a2=8c4750 a3=8 items=0 ppid=30538 pid=27518 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="hostname" exe="/bin/hostname" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171343709.301:61981): path="/bin/hostname" >type=USER_ACCT msg=audit(1171344001.667:61982): user pid=27548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171344001.668:61983): login pid=27548 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171344001.670:61984): user pid=27549 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171344001.671:61985): login pid=27549 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171344001.672:61986): user pid=27548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171344001.672:61987): user pid=27548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171344001.674:61988): user pid=27549 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171344001.675:61989): user pid=27549 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171344001.702:61990): user pid=27548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171344001.703:61991): user pid=27548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171344301.012:61992): user pid=27621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171344301.012:61993): login pid=27621 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171344301.016:61994): user pid=27621 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171344301.016:61995): user pid=27621 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171344474.352:61996): user pid=27675 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1171344474.352:61997): user pid=27675 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1171344474.362:61998): user pid=27675 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1171344474.362:61999): user pid=27675 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_CHAUTHTOK msg=audit(1171344496.253:62000): user pid=27713 uid=0 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: chauthtok acct=phighley : exe="/usr/bin/passwd" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_CHAUTHTOK msg=audit(1171344496.253:62001): user pid=27713 uid=0 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='op=change password id=1003 exe="/usr/bin/passwd" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_DISP msg=audit(1171344504.035:62002): user pid=27675 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1171344504.035:62003): user pid=27675 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1171344601.360:62004): user pid=27742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171344601.360:62005): login pid=27742 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171344601.362:62006): user pid=27743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171344601.363:62007): login pid=27743 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171344601.365:62008): user pid=27742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171344601.365:62009): user pid=27742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171344601.370:62010): user pid=27743 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171344601.370:62011): user pid=27743 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171344601.390:62012): user pid=27742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171344601.391:62013): user pid=27742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171344901.722:62014): user pid=27779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171344901.722:62015): login pid=27779 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171344901.725:62016): user pid=27779 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171344901.725:62017): user pid=27779 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171345182.916:62018): user pid=27157 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1171345182.917:62019): user pid=27157 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1171345201.068:62020): user pid=27818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171345201.069:62021): login pid=27818 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171345201.071:62022): user pid=27819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171345201.071:62023): login pid=27819 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171345201.074:62024): user pid=27818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171345201.074:62025): user pid=27818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171345201.077:62026): user pid=27819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171345201.077:62027): user pid=27819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171345201.101:62028): user pid=27818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171345201.101:62029): user pid=27818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171345501.441:62030): user pid=27858 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171345501.441:62031): login pid=27858 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171345501.446:62032): user pid=27858 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171345501.446:62033): user pid=27858 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171345661.564:62034): user pid=27084 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1171345661.565:62035): user pid=27084 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1171345705.605:62036): user pid=27920 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171345705.605:62037): user pid=27920 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171345801.796:62038): user pid=27945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171345801.796:62039): login pid=27945 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171345801.798:62040): user pid=27946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171345801.798:62041): login pid=27946 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171345801.804:62042): user pid=27945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171345801.804:62043): user pid=27945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171345801.808:62044): user pid=27946 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171345801.809:62045): user pid=27946 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171345801.826:62046): user pid=27945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171345801.827:62047): user pid=27945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171345831.907:62048): user pid=27967 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171345831.907:62049): user pid=27967 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=AVC msg=audit(1171345831.923:62050): avc: denied { lock } for pid=27968 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171345831.923:62050): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffa3720b70 a3=0 items=0 ppid=3104 pid=27968 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null) >type=AVC_PATH msg=audit(1171345831.923:62050): path="/home/dhighley/Mail/Trash" >type=USER_ACCT msg=audit(1171346101.188:62051): user pid=27993 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171346101.189:62052): login pid=27993 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171346101.197:62053): user pid=27993 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171346101.197:62054): user pid=27993 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171346401.546:62055): user pid=28099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171346401.546:62056): login pid=28099 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171346401.548:62057): user pid=28100 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171346401.549:62058): login pid=28100 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171346401.550:62059): user pid=28099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171346401.550:62060): user pid=28099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171346401.555:62061): user pid=28100 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171346401.555:62062): user pid=28100 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171346401.575:62063): user pid=28099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171346401.576:62064): user pid=28099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171346461.952:62065): user pid=28120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171346461.952:62066): login pid=28120 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171346461.956:62067): user pid=28120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171346461.956:62068): user pid=28120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171346463.015:62069): user pid=28120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171346463.016:62070): user pid=28120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171346617.615:62071): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171346617.615:62071): arch=c000003e syscall=2 success=yes exit=12 a0=3347540 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171346617.616:62072): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171346617.616:62072): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171346617.616:62072): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171346617.623:62073): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171346617.623:62073): arch=c000003e syscall=2 success=yes exit=9 a0=34b1560 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171346618.394:62074): avc: denied { search } for pid=28165 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171346618.394:62074): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171346618.394:62075): avc: denied { getattr } for pid=28165 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171346618.394:62075): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff4ffaaf50 a2=7fff4ffaaf50 a3=6c6280 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171346618.394:62075): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171346618.394:62076): avc: denied { read } for pid=28165 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171346618.394:62076): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171346618.395:62077): avc: denied { search } for pid=28165 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171346618.395:62077): avc: denied { write } for pid=28165 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171346618.395:62077): avc: denied { add_name } for pid=28165 comm="pyzor" name="gUJV8c" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171346618.395:62077): avc: denied { create } for pid=28165 comm="pyzor" name="gUJV8c" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171346618.395:62077): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171346618.396:62078): avc: denied { getattr } for pid=28165 comm="pyzor" name="gUJV8c" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171346618.396:62078): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff4ffa9440 a2=7fff4ffa9440 a3=3 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171346618.396:62078): path="/tmp/gUJV8c" >type=AVC msg=audit(1171346618.396:62079): avc: denied { write } for pid=28165 comm="pyzor" name="gUJV8c" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171346618.396:62079): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171346618.396:62079): path="/tmp/gUJV8c" >type=AVC msg=audit(1171346618.396:62080): avc: denied { remove_name } for pid=28165 comm="pyzor" name="gUJV8c" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171346618.396:62080): avc: denied { unlink } for pid=28165 comm="pyzor" name="gUJV8c" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171346618.396:62080): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171346618.397:62081): avc: denied { read } for pid=28165 comm="pyzor" name="tmp-VRBkP" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171346618.397:62081): arch=c000003e syscall=0 success=yes exit=1165 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171346618.397:62081): path=2F746D702F746D702D5652426B50202864656C6574656429 >type=AVC msg=audit(1171346623.354:62082): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171346623.354:62082): arch=c000003e syscall=62 success=yes exit=0 a0=6e05 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171346623.372:62083): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634221 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171346623.372:62083): arch=c000003e syscall=86 success=yes exit=0 a0=31c87a0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171346623.373:62084): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634221 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171346623.373:62084): arch=c000003e syscall=87 success=yes exit=0 a0=31c87a0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171346623.374:62085): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171346623.374:62085): arch=c000003e syscall=2 success=yes exit=9 a0=2fba900 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171346623.441:62086): avc: denied { write } for pid=28161 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171346623.441:62086): avc: denied { add_name } for pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171346623.441:62086): avc: denied { create } for pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171346623.441:62086): arch=c000003e syscall=2 success=yes exit=6 a0=61cc50 a1=c1 a2=124 a3=61cc50 items=0 ppid=28158 pid=28161 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171346623.442:62087): avc: denied { write } for pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171346623.442:62087): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cc50 items=0 ppid=28158 pid=28161 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171346623.442:62087): path="/home/dhighley/_B4G._SV0FB.douglas" >type=AVC msg=audit(1171346623.442:62088): avc: denied { getattr } for pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171346623.442:62088): arch=c000003e syscall=4 success=yes exit=0 a0=61cc50 a1=7fff9fa1c420 a2=7fff9fa1c420 a3=61cc50 items=0 ppid=28158 pid=28161 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171346623.442:62088): path="/home/dhighley/_B4G._SV0FB.douglas" >type=AVC msg=audit(1171346623.442:62089): avc: denied { link } for pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171346623.442:62089): arch=c000003e syscall=86 success=yes exit=0 a0=61cc50 a1=61b510 a2=7fff9fa1c340 a3=61cc50 items=0 ppid=28158 pid=28161 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171346623.442:62090): avc: denied { remove_name } for pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171346623.442:62090): avc: denied { unlink } for pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171346623.442:62090): arch=c000003e syscall=87 success=yes exit=0 a0=61cc50 a1=61b510 a2=7fff9fa1c340 a3=61cc50 items=0 ppid=28158 pid=28161 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171346623.442:62091): avc: denied { append } for pid=28161 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171346623.442:62091): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=28158 pid=28161 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171346701.027:62092): user pid=28180 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171346701.027:62093): login pid=28180 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171346701.031:62094): user pid=28180 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171346701.031:62095): user pid=28180 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171346848.156:62096): avc: denied { search } for pid=28232 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171346848.156:62096): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=28232 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171346848.157:62097): avc: denied { search } for pid=28232 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171346848.157:62097): avc: denied { write } for pid=28232 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171346848.157:62097): avc: denied { add_name } for pid=28232 comm="pyzor" name="_5IdiN" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171346848.157:62097): avc: denied { create } for pid=28232 comm="pyzor" name="_5IdiN" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171346848.157:62097): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=28232 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171346848.157:62098): avc: denied { getattr } for pid=28232 comm="pyzor" name="_5IdiN" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171346848.157:62098): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffbf7c4070 a2=7fffbf7c4070 a3=2 items=0 ppid=29238 pid=28232 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171346848.157:62098): path="/tmp/_5IdiN" >type=AVC msg=audit(1171346848.158:62099): avc: denied { write } for pid=28232 comm="pyzor" name="_5IdiN" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171346848.158:62099): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=29238 pid=28232 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171346848.158:62099): path="/tmp/_5IdiN" >type=AVC msg=audit(1171346848.158:62100): avc: denied { remove_name } for pid=28232 comm="pyzor" name="_5IdiN" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171346848.158:62100): avc: denied { unlink } for pid=28232 comm="pyzor" name="_5IdiN" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171346848.158:62100): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=28232 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171346849.379:62101): avc: denied { append } for pid=28228 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171346849.379:62101): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=28219 pid=28228 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171347001.429:62102): user pid=28253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171347001.429:62103): login pid=28253 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171347001.433:62104): user pid=28252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171347001.433:62105): login pid=28252 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171347001.434:62106): user pid=28253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171347001.434:62107): user pid=28253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171347001.449:62108): user pid=28252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171347001.449:62109): user pid=28252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171347001.478:62110): user pid=28252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171347001.478:62111): user pid=28252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171347301.862:62112): user pid=28654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171347301.863:62113): login pid=28654 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171347301.880:62114): user pid=28654 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171347301.880:62115): user pid=28654 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_CHAUTHTOK msg=audit(1171347511.112:62116): user pid=28975 uid=0 auid=1000 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1171347511.141:62117): user pid=28976 uid=0 auid=1000 subj=user_u:system_r:useradd_t:s0 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1171347601.207:62118): user pid=29437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171347601.208:62119): login pid=29437 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171347601.209:62120): user pid=29438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171347601.209:62121): login pid=29438 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171347601.221:62122): user pid=29437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171347601.221:62123): user pid=29437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171347601.222:62124): user pid=29438 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171347601.222:62125): user pid=29438 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171347601.799:62126): user pid=29437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171347601.799:62127): user pid=29437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171347697.559:62128): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171347697.559:62128): arch=c000003e syscall=2 success=yes exit=12 a0=33e7eb0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171347697.560:62129): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171347697.560:62129): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171347697.560:62129): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171347697.571:62130): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171347697.571:62130): arch=c000003e syscall=2 success=yes exit=9 a0=3228c10 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171347698.251:62131): avc: denied { search } for pid=29648 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171347698.251:62131): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171347698.257:62132): avc: denied { getattr } for pid=29648 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171347698.257:62132): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff3df1cec0 a2=7fff3df1cec0 a3=6c6280 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171347698.257:62132): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171347698.257:62133): avc: denied { read } for pid=29648 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171347698.257:62133): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171347698.258:62134): avc: denied { search } for pid=29648 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171347698.258:62134): avc: denied { write } for pid=29648 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171347698.258:62134): avc: denied { add_name } for pid=29648 comm="pyzor" name="_t6zig" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171347698.258:62134): avc: denied { create } for pid=29648 comm="pyzor" name="_t6zig" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171347698.258:62134): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171347698.266:62135): avc: denied { getattr } for pid=29648 comm="pyzor" name="_t6zig" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171347698.266:62135): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff3df1b7c0 a2=7fff3df1b7c0 a3=2 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171347698.266:62135): path="/tmp/_t6zig" >type=AVC msg=audit(1171347698.266:62136): avc: denied { write } for pid=29648 comm="pyzor" name="_t6zig" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171347698.266:62136): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171347698.266:62136): path="/tmp/_t6zig" >type=AVC msg=audit(1171347698.266:62137): avc: denied { remove_name } for pid=29648 comm="pyzor" name="_t6zig" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171347698.266:62137): avc: denied { unlink } for pid=29648 comm="pyzor" name="_t6zig" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171347698.266:62137): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171347698.267:62138): avc: denied { read } for pid=29648 comm="pyzor" name="tmpolR0cs" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171347698.267:62138): arch=c000003e syscall=0 success=yes exit=460 a0=4 a1=2aaaaf34d000 a2=1000 a3=16 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171347698.267:62138): path=2F746D702F746D706F6C52306373202864656C6574656429 >type=AVC msg=audit(1171347703.070:62139): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171347703.070:62139): arch=c000003e syscall=62 success=yes exit=0 a0=73d0 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171347703.372:62140): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634218 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171347703.372:62140): arch=c000003e syscall=86 success=yes exit=0 a0=3032cd0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171347703.372:62141): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634218 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171347703.372:62141): arch=c000003e syscall=87 success=yes exit=0 a0=3032cd0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171347703.380:62142): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171347703.380:62142): arch=c000003e syscall=2 success=yes exit=9 a0=329abd0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171347703.687:62143): avc: denied { write } for pid=29640 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171347703.687:62143): avc: denied { add_name } for pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171347703.687:62143): avc: denied { create } for pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171347703.687:62143): arch=c000003e syscall=2 success=yes exit=6 a0=61c7f0 a1=c1 a2=124 a3=61c7f0 items=0 ppid=29637 pid=29640 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171347703.687:62144): avc: denied { write } for pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" dev=dm-0 ino=12487108 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171347703.687:62144): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c7f0 items=0 ppid=29637 pid=29640 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171347703.687:62144): path="/home/dhighley/_IPH.3jV0FB.douglas" >type=AVC msg=audit(1171347703.688:62145): avc: denied { getattr } for pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" dev=dm-0 ino=12487108 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171347703.688:62145): arch=c000003e syscall=4 success=yes exit=0 a0=61c7f0 a1=7fffaee6eb00 a2=7fffaee6eb00 a3=61c7f0 items=0 ppid=29637 pid=29640 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171347703.688:62145): path="/home/dhighley/_IPH.3jV0FB.douglas" >type=AVC msg=audit(1171347703.688:62146): avc: denied { link } for pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" dev=dm-0 ino=12487108 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171347703.688:62146): arch=c000003e syscall=86 success=yes exit=0 a0=61c7f0 a1=61b530 a2=7fffaee6ea20 a3=61c7f0 items=0 ppid=29637 pid=29640 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171347703.688:62147): avc: denied { remove_name } for pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" dev=dm-0 ino=12487108 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171347703.688:62147): avc: denied { unlink } for pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" dev=dm-0 ino=12487108 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171347703.688:62147): arch=c000003e syscall=87 success=yes exit=0 a0=61c7f0 a1=61b530 a2=7fffaee6ea20 a3=61c7f0 items=0 ppid=29637 pid=29640 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171347703.704:62148): avc: denied { append } for pid=29640 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171347703.704:62148): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=29637 pid=29640 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1171347861.476:62149): user pid=27226 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1171347861.488:62150): user pid=27226 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1171347901.333:62151): user pid=30170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171347901.334:62152): login pid=30170 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171347901.337:62153): user pid=30170 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171347901.337:62154): user pid=30170 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171347914.458:62155): user pid=27017 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1171347914.459:62156): user pid=27017 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171348201.681:62157): user pid=30208 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171348201.682:62158): login pid=30208 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171348201.682:62159): user pid=30209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171348201.682:62160): login pid=30209 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171348201.688:62161): user pid=30208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171348201.688:62162): user pid=30208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171348201.692:62163): user pid=30209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171348201.693:62164): user pid=30209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171348201.712:62165): user pid=30208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171348201.712:62166): user pid=30208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171348339.701:62167): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171348339.701:62168): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ERR msg=audit(1171348340.367:62169): user pid=3616 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ACCT msg=audit(1171348501.033:62170): user pid=30287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171348501.034:62171): login pid=30287 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171348501.037:62172): user pid=30287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171348501.037:62173): user pid=30287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171348801.367:62174): user pid=30325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171348801.367:62175): login pid=30325 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171348801.368:62176): user pid=30324 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171348801.369:62177): login pid=30324 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171348801.371:62178): user pid=30324 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171348801.371:62179): user pid=30324 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171348801.376:62180): user pid=30325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171348801.376:62181): user pid=30325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171348801.396:62182): user pid=30324 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171348801.396:62183): user pid=30324 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171349062.896:62184): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171349062.896:62184): arch=c000003e syscall=2 success=yes exit=12 a0=33ed420 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171349062.896:62185): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171349062.896:62185): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171349062.896:62185): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171349062.910:62186): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171349062.910:62186): arch=c000003e syscall=2 success=yes exit=9 a0=34977f0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171349063.470:62187): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171349063.470:62187): arch=c000003e syscall=1 success=yes exit=67 a0=9 a1=31e2f10 a2=43 a3=31e2f10 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171349063.470:62187): path="/home/dhighley/.razor/razor-agent.log" >type=AVC msg=audit(1171349063.511:62188): avc: denied { search } for pid=30369 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171349063.511:62188): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171349063.511:62189): avc: denied { getattr } for pid=30369 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171349063.511:62189): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff64b5fb00 a2=7fff64b5fb00 a3=6c6280 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171349063.511:62189): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171349063.511:62190): avc: denied { read } for pid=30369 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171349063.511:62190): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171349063.512:62191): avc: denied { search } for pid=30369 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171349063.512:62191): avc: denied { write } for pid=30369 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171349063.512:62191): avc: denied { add_name } for pid=30369 comm="pyzor" name="Iqbi67" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171349063.512:62191): avc: denied { create } for pid=30369 comm="pyzor" name="Iqbi67" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171349063.512:62191): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171349063.513:62192): avc: denied { getattr } for pid=30369 comm="pyzor" name="Iqbi67" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171349063.513:62192): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff64b5d970 a2=7fff64b5d970 a3=3 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171349063.513:62192): path="/tmp/Iqbi67" >type=AVC msg=audit(1171349063.513:62193): avc: denied { write } for pid=30369 comm="pyzor" name="Iqbi67" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171349063.513:62193): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171349063.513:62193): path="/tmp/Iqbi67" >type=AVC msg=audit(1171349063.513:62194): avc: denied { remove_name } for pid=30369 comm="pyzor" name="Iqbi67" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171349063.513:62194): avc: denied { unlink } for pid=30369 comm="pyzor" name="Iqbi67" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171349063.513:62194): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171349063.540:62195): avc: denied { read } for pid=30369 comm="pyzor" name="tmpsPJ03Q" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171349063.540:62195): arch=c000003e syscall=0 success=yes exit=2778 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171349063.540:62195): path=2F746D702F746D7073504A303351202864656C6574656429 >type=AVC msg=audit(1171349068.473:62196): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171349068.473:62196): arch=c000003e syscall=62 success=yes exit=0 a0=76a1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171349068.485:62197): avc: denied { ioctl } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171349068.485:62197): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171349068.485:62197): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.6550" >type=AVC msg=audit(1171349068.485:62198): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171349068.485:62198): arch=c000003e syscall=86 success=yes exit=0 a0=30524a0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171349068.486:62199): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171349068.486:62199): arch=c000003e syscall=87 success=yes exit=0 a0=30524a0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171349068.486:62200): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171349068.486:62200): arch=c000003e syscall=2 success=yes exit=9 a0=33eb9e0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171349068.519:62201): avc: denied { write } for pid=30365 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171349068.519:62201): avc: denied { add_name } for pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171349068.519:62201): avc: denied { create } for pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171349068.519:62201): arch=c000003e syscall=2 success=yes exit=6 a0=620760 a1=c1 a2=124 a3=620760 items=0 ppid=30360 pid=30365 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171349068.520:62202): avc: denied { write } for pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171349068.520:62202): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=620760 items=0 ppid=30360 pid=30365 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171349068.520:62202): path="/home/dhighley/_daH.M5V0FB.douglas" >type=AVC msg=audit(1171349068.520:62203): avc: denied { getattr } for pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171349068.520:62203): arch=c000003e syscall=4 success=yes exit=0 a0=620760 a1=7fffa1da0790 a2=7fffa1da0790 a3=620760 items=0 ppid=30360 pid=30365 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171349068.520:62203): path="/home/dhighley/_daH.M5V0FB.douglas" >type=AVC msg=audit(1171349068.520:62204): avc: denied { link } for pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171349068.520:62204): arch=c000003e syscall=86 success=yes exit=0 a0=620760 a1=620740 a2=7fffa1da06b0 a3=620760 items=0 ppid=30360 pid=30365 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171349068.520:62205): avc: denied { remove_name } for pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171349068.520:62205): avc: denied { unlink } for pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171349068.520:62205): arch=c000003e syscall=87 success=yes exit=0 a0=620760 a1=620740 a2=7fffa1da06b0 a3=620760 items=0 ppid=30360 pid=30365 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171349068.520:62206): avc: denied { append } for pid=30365 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171349068.520:62206): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=30360 pid=30365 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171349101.707:62207): user pid=30377 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171349101.707:62208): login pid=30377 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171349101.711:62209): user pid=30377 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171349101.711:62210): user pid=30377 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171349189.674:62211): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171349189.674:62211): arch=c000003e syscall=2 success=yes exit=12 a0=3377b00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171349401.043:62212): user pid=30422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171349401.043:62213): login pid=30422 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171349401.043:62214): user pid=30423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171349401.044:62215): login pid=30423 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171349401.049:62216): user pid=30422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171349401.049:62217): user pid=30422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171349401.055:62218): user pid=30423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171349401.056:62219): user pid=30423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171349401.071:62220): user pid=30422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171349401.071:62221): user pid=30422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171349701.399:62222): user pid=30458 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171349701.399:62223): login pid=30458 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171349701.403:62224): user pid=30458 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171349701.403:62225): user pid=30458 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171349940.487:62226): avc: denied { search } for pid=30499 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171349940.487:62226): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=30499 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171350001.739:62227): user pid=30505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171350001.739:62228): login pid=30505 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171350001.741:62229): user pid=30506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171350001.741:62230): login pid=30506 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171350001.744:62231): user pid=30505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171350001.745:62232): user pid=30505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171350001.747:62233): user pid=30506 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171350001.747:62234): user pid=30506 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171350001.773:62235): user pid=30505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171350001.774:62236): user pid=30505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171350061.067:62237): user pid=30522 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171350061.067:62238): login pid=30522 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171350061.070:62239): user pid=30522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171350061.070:62240): user pid=30522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171350062.111:62241): user pid=30522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171350062.111:62242): user pid=30522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171350225.053:62243): avc: denied { create } for pid=30569 comm="pyzor" name="zyJl7X" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171350225.053:62243): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=30569 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171350225.053:62244): avc: denied { getattr } for pid=30569 comm="pyzor" name="zyJl7X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171350225.053:62244): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe87bec50 a2=7fffe87bec50 a3=3 items=0 ppid=6550 pid=30569 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171350225.053:62244): path="/tmp/zyJl7X" >type=AVC msg=audit(1171350225.053:62245): avc: denied { write } for pid=30569 comm="pyzor" name="zyJl7X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171350225.053:62245): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=30569 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171350225.053:62245): path="/tmp/zyJl7X" >type=AVC msg=audit(1171350225.053:62246): avc: denied { search } for pid=30569 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171350225.053:62246): avc: denied { write } for pid=30569 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171350225.053:62246): avc: denied { remove_name } for pid=30569 comm="pyzor" name="zyJl7X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171350225.053:62246): avc: denied { unlink } for pid=30569 comm="pyzor" name="zyJl7X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171350225.053:62246): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=30569 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171350225.054:62247): avc: denied { add_name } for pid=30569 comm="pyzor" name="tmp2SAdjz" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171350225.054:62247): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=30569 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171350225.078:62248): avc: denied { read } for pid=30569 comm="pyzor" name="tmp2SAdjz" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171350225.078:62248): arch=c000003e syscall=0 success=yes exit=496 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=30569 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171350225.078:62248): path=2F746D702F746D70325341646A7A202864656C6574656429 >type=AVC msg=audit(1171350227.912:62249): avc: denied { append } for pid=30565 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171350227.912:62249): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=30562 pid=30565 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171350301.118:62250): user pid=30587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171350301.118:62251): login pid=30587 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171350301.122:62252): user pid=30587 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171350301.122:62253): user pid=30587 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171350601.450:62254): user pid=30624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171350601.450:62255): login pid=30624 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171350601.453:62256): user pid=30625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171350601.453:62257): login pid=30625 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171350601.454:62258): user pid=30624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171350601.454:62259): user pid=30624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171350601.456:62260): user pid=30625 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171350601.457:62261): user pid=30625 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171350601.478:62262): user pid=30624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171350601.478:62263): user pid=30624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171350787.548:62264): user pid=27309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171350787.549:62265): user pid=27309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171350901.553:62266): user pid=30663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171350901.553:62267): login pid=30663 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171350901.557:62268): user pid=30663 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171350901.557:62269): user pid=30663 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171351201.886:62270): user pid=30697 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171351201.887:62271): login pid=30697 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171351201.889:62272): user pid=30698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171351201.889:62273): login pid=30698 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171351201.890:62274): user pid=30697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171351201.891:62275): user pid=30697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171351201.894:62276): user pid=30698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171351201.894:62277): user pid=30698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171351201.911:62278): user pid=30697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171351201.912:62279): user pid=30697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171351501.230:62280): user pid=30735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171351501.231:62281): login pid=30735 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171351501.235:62282): user pid=30735 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171351501.235:62283): user pid=30735 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171351801.554:62284): user pid=30771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171351801.554:62285): user pid=30770 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171351801.554:62286): login pid=30770 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171351801.555:62287): login pid=30771 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171351801.560:62288): user pid=30771 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171351801.560:62289): user pid=30771 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171351801.564:62290): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171351801.564:62291): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171351801.586:62292): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171351801.586:62293): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171352101.889:62294): user pid=30809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171352101.889:62295): login pid=30809 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171352101.892:62296): user pid=30809 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171352101.892:62297): user pid=30809 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171352401.223:62298): user pid=30842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171352401.223:62299): login pid=30842 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171352401.225:62300): user pid=30843 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171352401.225:62301): login pid=30843 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171352401.227:62302): user pid=30842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171352401.227:62303): user pid=30842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171352401.232:62304): user pid=30843 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171352401.232:62305): user pid=30843 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171352401.250:62306): user pid=30842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171352401.251:62307): user pid=30842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171352701.557:62308): user pid=30880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171352701.558:62309): login pid=30880 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171352701.562:62310): user pid=30880 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171352701.562:62311): user pid=30880 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171353001.881:62312): user pid=30915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171353001.881:62313): login pid=30915 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171353001.883:62314): user pid=30916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171353001.883:62315): login pid=30916 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171353001.886:62316): user pid=30915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171353001.886:62317): user pid=30915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171353001.890:62318): user pid=30916 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171353001.890:62319): user pid=30916 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171353001.905:62320): user pid=30915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171353001.905:62321): user pid=30915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171353181.218:62322): user pid=30942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171353181.219:62323): login pid=30942 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171353181.222:62324): user pid=30942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171353181.222:62325): user pid=30942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171353181.424:62326): user pid=30942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171353181.424:62327): user pid=30942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171353301.430:62328): user pid=30960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171353301.431:62329): login pid=30960 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171353301.435:62330): user pid=30960 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171353301.435:62331): user pid=30960 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171353601.755:62332): user pid=30993 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171353601.755:62333): login pid=30993 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171353601.757:62334): user pid=30994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171353601.757:62335): login pid=30994 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171353601.759:62336): user pid=30993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171353601.759:62337): user pid=30993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171353601.760:62338): user pid=30995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171353601.760:62339): login pid=30995 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171353601.768:62340): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171353601.768:62341): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171353601.776:62342): user pid=30995 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171353601.776:62343): user pid=30995 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171353601.781:62344): user pid=30993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171353601.782:62345): user pid=30993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171353661.102:62346): user pid=31015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171353661.103:62347): login pid=31015 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171353661.107:62348): user pid=31015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171353661.107:62349): user pid=31015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171353661.990:62350): user pid=31015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171353661.991:62351): user pid=31015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171353901.998:62352): user pid=31050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171353901.999:62353): login pid=31050 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171353902.005:62354): user pid=31050 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171353902.005:62355): user pid=31050 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171354201.340:62356): user pid=31089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171354201.340:62357): login pid=31089 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171354201.342:62358): user pid=31090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171354201.342:62359): login pid=31090 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171354201.344:62360): user pid=31089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171354201.344:62361): user pid=31089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171354201.346:62362): user pid=31090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171354201.346:62363): user pid=31090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171354201.362:62364): user pid=31089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171354201.363:62365): user pid=31089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171354481.444:62366): avc: denied { append } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171354481.444:62366): arch=c000003e syscall=2 success=yes exit=12 a0=349ace0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171354481.444:62367): avc: denied { ioctl } for pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171354481.444:62367): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171354481.444:62367): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171354481.450:62368): avc: denied { append } for pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171354481.450:62368): arch=c000003e syscall=2 success=yes exit=9 a0=321e870 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171354482.158:62369): avc: denied { getattr } for pid=31134 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171354482.158:62369): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff3ccc3c70 a2=7fff3ccc3c70 a3=6c6280 items=0 ppid=6550 pid=31134 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171354482.158:62369): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171354482.159:62370): avc: denied { read } for pid=31134 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171354482.159:62370): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=31134 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171354487.122:62371): avc: denied { signal } for pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171354487.122:62371): arch=c000003e syscall=62 success=yes exit=0 a0=799e a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171354487.135:62372): avc: denied { link } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171354487.135:62372): arch=c000003e syscall=86 success=yes exit=0 a0=2fdc930 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171354487.135:62373): avc: denied { unlink } for pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171354487.135:62373): arch=c000003e syscall=87 success=yes exit=0 a0=2fdc930 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171354487.136:62374): avc: denied { write } for pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171354487.136:62374): arch=c000003e syscall=2 success=yes exit=9 a0=33e0660 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171354487.176:62375): avc: denied { write } for pid=31129 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171354487.176:62375): avc: denied { add_name } for pid=31129 comm="procmail" name="_ZmH.3NX0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171354487.176:62375): arch=c000003e syscall=2 success=yes exit=6 a0=61b620 a1=c1 a2=124 a3=61b620 items=0 ppid=31124 pid=31129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171354487.176:62376): avc: denied { remove_name } for pid=31129 comm="procmail" name="_ZmH.3NX0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171354487.176:62376): arch=c000003e syscall=87 success=yes exit=0 a0=61b620 a1=61c990 a2=7fffec274b90 a3=61b620 items=0 ppid=31124 pid=31129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171354501.669:62377): user pid=31140 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171354501.669:62378): login pid=31140 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171354501.672:62379): user pid=31140 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171354501.672:62380): user pid=31140 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171354801.004:62381): user pid=31177 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171354801.004:62382): login pid=31177 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171354801.007:62383): user pid=31178 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171354801.007:62384): login pid=31178 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171354801.008:62385): user pid=31177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171354801.008:62386): user pid=31177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171354801.011:62387): user pid=31178 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171354801.011:62388): user pid=31178 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171354801.031:62389): user pid=31177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171354801.031:62390): user pid=31177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171355101.345:62391): user pid=31216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171355101.346:62392): login pid=31216 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171355101.349:62393): user pid=31216 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171355101.349:62394): user pid=31216 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171355401.668:62395): user pid=31251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171355401.668:62396): login pid=31251 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171355401.670:62397): user pid=31252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171355401.670:62398): login pid=31252 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171355401.672:62399): user pid=31251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171355401.672:62400): user pid=31251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171355401.677:62401): user pid=31252 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171355401.678:62402): user pid=31252 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171355401.691:62403): user pid=31251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171355401.692:62404): user pid=31251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171355701.010:62405): user pid=31287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171355701.011:62406): login pid=31287 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171355701.015:62407): user pid=31287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171355701.015:62408): user pid=31287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171355802.475:62409): avc: denied { search } for pid=31313 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171355802.475:62409): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=31313 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171355802.475:62410): avc: denied { create } for pid=31313 comm="pyzor" name="b7_F6m" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171355802.475:62410): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=31313 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171355802.476:62411): avc: denied { getattr } for pid=31313 comm="pyzor" name="b7_F6m" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171355802.476:62411): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff3c8d7d70 a2=7fff3c8d7d70 a3=3 items=0 ppid=6550 pid=31313 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171355802.476:62411): path="/tmp/b7_F6m" >type=AVC msg=audit(1171355802.476:62412): avc: denied { write } for pid=31313 comm="pyzor" name="b7_F6m" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171355802.476:62412): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=31313 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171355802.476:62412): path="/tmp/b7_F6m" >type=AVC msg=audit(1171355802.476:62413): avc: denied { unlink } for pid=31313 comm="pyzor" name="b7_F6m" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171355802.476:62413): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=31313 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171355802.476:62414): avc: denied { read } for pid=31313 comm="pyzor" name="tmpyxmpor" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171355802.476:62414): arch=c000003e syscall=0 success=yes exit=546 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=31313 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171355802.476:62414): path=2F746D702F746D7079786D706F72202864656C6574656429 >type=AVC msg=audit(1171355807.473:62415): avc: denied { append } for pid=31309 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171355807.473:62415): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=31304 pid=31309 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171355898.156:62416): avc: denied { search } for pid=31332 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171355898.156:62416): avc: denied { write } for pid=31332 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171355898.156:62416): avc: denied { add_name } for pid=31332 comm="pyzor" name="15qR8x" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171355898.156:62416): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=31332 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171355898.157:62417): avc: denied { remove_name } for pid=31332 comm="pyzor" name="15qR8x" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171355898.157:62417): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=31332 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171356001.339:62418): user pid=31346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171356001.339:62419): login pid=31346 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171356001.340:62420): user pid=31345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171356001.340:62421): login pid=31345 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171356001.343:62422): user pid=31345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171356001.343:62423): user pid=31345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171356001.346:62424): user pid=31346 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171356001.346:62425): user pid=31346 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171356001.363:62426): user pid=31345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171356001.363:62427): user pid=31345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171356301.679:62428): user pid=31385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171356301.679:62429): login pid=31385 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171356301.683:62430): user pid=31385 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171356301.683:62431): user pid=31385 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171356536.981:62432): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171356536.981:62432): arch=c000003e syscall=2 success=yes exit=9 a0=334e120 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171356537.582:62433): avc: denied { getattr } for pid=31423 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171356537.582:62433): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff7040aac0 a2=7fff7040aac0 a3=6c6280 items=0 ppid=29238 pid=31423 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171356537.582:62433): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171356537.582:62434): avc: denied { read } for pid=31423 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171356537.582:62434): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=31423 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171356542.544:62435): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171356542.544:62435): arch=c000003e syscall=62 success=yes exit=0 a0=7abf a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171356542.558:62436): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171356542.558:62436): arch=c000003e syscall=2 success=yes exit=9 a0=334eca0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171356542.577:62437): avc: denied { write } for pid=31419 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171356542.577:62437): avc: denied { add_name } for pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171356542.577:62437): avc: denied { create } for pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171356542.577:62437): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=31414 pid=31419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171356542.578:62438): avc: denied { write } for pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171356542.578:62438): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=31414 pid=31419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171356542.578:62438): path="/home/dhighley/_7qH.-tX0FB.douglas" >type=AVC msg=audit(1171356542.578:62439): avc: denied { getattr } for pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171356542.578:62439): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fffaa6a40a0 a2=7fffaa6a40a0 a3=61b650 items=0 ppid=31414 pid=31419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171356542.578:62439): path="/home/dhighley/_7qH.-tX0FB.douglas" >type=AVC msg=audit(1171356542.578:62440): avc: denied { link } for pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171356542.578:62440): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=620240 a2=7fffaa6a3fc0 a3=61b650 items=0 ppid=31414 pid=31419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171356542.578:62441): avc: denied { remove_name } for pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171356542.578:62441): avc: denied { unlink } for pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171356542.578:62441): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=620240 a2=7fffaa6a3fc0 a3=61b650 items=0 ppid=31414 pid=31419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171356602.002:62442): user pid=31431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171356602.002:62443): login pid=31431 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171356602.005:62444): user pid=31432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171356602.005:62445): login pid=31432 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171356602.010:62446): user pid=31431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171356602.010:62447): user pid=31431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171356602.013:62448): user pid=31432 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171356602.013:62449): user pid=31432 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171356602.035:62450): user pid=31431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171356602.035:62451): user pid=31431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171356829.192:62452): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171356829.192:62452): arch=c000003e syscall=2 success=yes exit=12 a0=3265960 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171356829.192:62453): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171356829.192:62453): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171356829.192:62453): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171356834.917:62454): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171356834.917:62454): arch=c000003e syscall=86 success=yes exit=0 a0=3350af0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171356834.917:62455): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171356834.917:62455): arch=c000003e syscall=87 success=yes exit=0 a0=3350af0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171356901.356:62456): user pid=31479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171356901.356:62457): login pid=31479 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171356901.359:62458): user pid=31479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171356901.359:62459): user pid=31479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171357201.697:62460): user pid=31515 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171357201.698:62461): login pid=31515 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171357201.698:62462): user pid=31516 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171357201.699:62463): login pid=31516 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171357201.701:62464): user pid=31515 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171357201.701:62465): user pid=31515 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171357201.708:62466): user pid=31516 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171357201.708:62467): user pid=31516 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171357201.720:62468): user pid=31515 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171357201.720:62469): user pid=31515 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171357261.036:62470): user pid=31533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171357261.036:62471): login pid=31533 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171357261.041:62472): user pid=31533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171357261.041:62473): user pid=31533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171357261.924:62474): user pid=31533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171357261.925:62475): user pid=31533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171357495.922:62476): avc: denied { search } for pid=31591 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171357495.922:62476): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=31591 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171357501.934:62477): user pid=31593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171357501.934:62478): login pid=31593 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171357501.938:62479): user pid=31593 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171357501.938:62480): user pid=31593 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171357801.270:62481): user pid=31632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171357801.270:62482): login pid=31632 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171357801.272:62483): user pid=31633 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171357801.272:62484): login pid=31633 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171357801.274:62485): user pid=31632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171357801.274:62486): user pid=31632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171357801.277:62487): user pid=31633 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171357801.277:62488): user pid=31633 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171357801.296:62489): user pid=31632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171357801.296:62490): user pid=31632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171358101.618:62491): user pid=31668 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171358101.618:62492): login pid=31668 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171358101.622:62493): user pid=31668 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171358101.622:62494): user pid=31668 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171358401.953:62495): user pid=31707 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171358401.953:62496): login pid=31707 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171358401.955:62497): user pid=31708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171358401.955:62498): login pid=31708 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171358401.956:62499): user pid=31707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171358401.956:62500): user pid=31707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171358401.959:62501): user pid=31708 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171358401.959:62502): user pid=31708 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171358401.985:62503): user pid=31707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171358401.985:62504): user pid=31707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171358701.291:62505): user pid=31743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171358701.291:62506): login pid=31743 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171358701.295:62507): user pid=31743 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171358701.296:62508): user pid=31743 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171359001.613:62509): user pid=31784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171359001.614:62510): login pid=31784 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171359001.616:62511): user pid=31785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171359001.616:62512): login pid=31785 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171359001.618:62513): user pid=31784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171359001.618:62514): user pid=31784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171359001.620:62515): user pid=31785 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171359001.620:62516): user pid=31785 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171359001.640:62517): user pid=31784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171359001.640:62518): user pid=31784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171359301.946:62519): user pid=31827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171359301.946:62520): login pid=31827 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171359301.951:62521): user pid=31827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171359301.951:62522): user pid=31827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171359601.273:62523): user pid=31861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171359601.273:62524): login pid=31861 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171359601.275:62525): user pid=31862 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171359601.275:62526): login pid=31862 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171359601.277:62527): user pid=31861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171359601.277:62528): user pid=31861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171359601.283:62529): user pid=31862 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171359601.284:62530): user pid=31862 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171359601.295:62531): user pid=31861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171359601.295:62532): user pid=31861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171359901.607:62533): user pid=31897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171359901.607:62534): login pid=31897 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171359901.611:62535): user pid=31897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171359901.612:62536): user pid=31897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171360201.929:62537): user pid=31934 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171360201.929:62538): login pid=31934 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171360201.930:62539): user pid=31935 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171360201.930:62540): login pid=31935 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171360201.933:62541): user pid=31934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171360201.933:62542): user pid=31934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171360201.935:62543): user pid=31935 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171360201.935:62544): user pid=31935 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171360201.959:62545): user pid=31934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171360201.959:62546): user pid=31934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171360501.270:62547): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171360501.270:62548): login pid=31978 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171360501.273:62549): user pid=31978 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171360501.273:62550): user pid=31978 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171360801.598:62551): user pid=32013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171360801.598:62552): login pid=32013 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171360801.600:62553): user pid=32014 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171360801.600:62554): login pid=32014 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171360801.601:62555): user pid=32013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171360801.601:62556): user pid=32013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171360801.605:62557): user pid=32014 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171360801.605:62558): user pid=32014 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171360801.622:62559): user pid=32013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171360801.623:62560): user pid=32013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171360861.930:62561): user pid=32028 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171360861.930:62562): login pid=32028 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171360861.933:62563): user pid=32028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171360861.933:62564): user pid=32028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171360862.847:62565): user pid=32028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171360862.847:62566): user pid=32028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171361101.855:62567): user pid=32065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171361101.855:62568): login pid=32065 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171361101.859:62569): user pid=32065 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171361101.859:62570): user pid=32065 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171361401.181:62571): user pid=32102 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171361401.182:62572): login pid=32102 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171361401.184:62573): user pid=32103 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171361401.184:62574): login pid=32103 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171361401.188:62575): user pid=32102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171361401.188:62576): user pid=32102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171361401.190:62577): user pid=32103 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171361401.190:62578): user pid=32103 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171361401.209:62579): user pid=32102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171361401.210:62580): user pid=32102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171361587.890:62581): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171361587.890:62582): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171361701.897:62583): user pid=32147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171361701.897:62584): login pid=32147 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171361701.901:62585): user pid=32147 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171361701.901:62586): user pid=32147 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171362001.234:62587): user pid=32182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171362001.234:62588): login pid=32182 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171362001.236:62589): user pid=32183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171362001.236:62590): login pid=32183 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171362001.238:62591): user pid=32182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171362001.238:62592): user pid=32182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171362001.249:62593): user pid=32183 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171362001.249:62594): user pid=32183 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171362001.256:62595): user pid=32182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171362001.257:62596): user pid=32182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171362090.539:62597): avc: denied { search } for pid=32211 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171362090.539:62597): avc: denied { write } for pid=32211 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171362090.539:62597): avc: denied { add_name } for pid=32211 comm="pyzor" name="keHunJ" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171362090.539:62597): avc: denied { create } for pid=32211 comm="pyzor" name="keHunJ" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171362090.539:62597): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=32211 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171362090.540:62598): avc: denied { getattr } for pid=32211 comm="pyzor" name="keHunJ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171362090.540:62598): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff573a9ec0 a2=7fff573a9ec0 a3=3 items=0 ppid=29238 pid=32211 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171362090.540:62598): path="/tmp/keHunJ" >type=AVC msg=audit(1171362090.540:62599): avc: denied { write } for pid=32211 comm="pyzor" name="keHunJ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171362090.540:62599): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=29238 pid=32211 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171362090.540:62599): path="/tmp/keHunJ" >type=AVC msg=audit(1171362090.540:62600): avc: denied { remove_name } for pid=32211 comm="pyzor" name="keHunJ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171362090.540:62600): avc: denied { unlink } for pid=32211 comm="pyzor" name="keHunJ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171362090.540:62600): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d8340 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=32211 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171362090.540:62601): avc: denied { read } for pid=32211 comm="pyzor" name="tmpo_QONm" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171362090.540:62601): arch=c000003e syscall=0 success=yes exit=1052 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=32211 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171362090.540:62601): path=2F746D702F746D706F5F514F4E6D202864656C6574656429 >type=AVC msg=audit(1171362183.404:62602): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171362183.404:62602): arch=c000003e syscall=2 success=yes exit=12 a0=3216920 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171362183.404:62603): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171362183.404:62603): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171362183.404:62603): path="/home/phighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171362183.409:62604): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=12487199 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171362183.409:62604): arch=c000003e syscall=2 success=yes exit=9 a0=3202090 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171362184.093:62605): avc: denied { getattr } for pid=32231 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171362184.093:62605): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff41bf0850 a2=7fff41bf0850 a3=6c6280 items=0 ppid=29238 pid=32231 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171362184.093:62605): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171362184.093:62606): avc: denied { read } for pid=32231 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171362184.093:62606): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=32231 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171362189.057:62607): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171362189.057:62607): arch=c000003e syscall=62 success=yes exit=0 a0=7de7 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171362189.248:62608): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171362189.248:62608): arch=c000003e syscall=86 success=yes exit=0 a0=31cef70 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171362189.248:62609): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171362189.248:62609): arch=c000003e syscall=87 success=yes exit=0 a0=31cef70 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171362189.249:62610): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=12487184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171362189.249:62610): arch=c000003e syscall=2 success=yes exit=9 a0=3058030 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171362189.263:62611): avc: denied { write } for pid=32227 comm="procmail" name="phighley" dev=dm-0 ino=12485733 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171362189.263:62611): avc: denied { add_name } for pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171362189.263:62611): avc: denied { create } for pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171362189.263:62611): arch=c000003e syscall=2 success=yes exit=6 a0=61c7f0 a1=c1 a2=124 a3=61c7f0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171362189.263:62612): avc: denied { write } for pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171362189.263:62612): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c7f0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171362189.263:62612): path="/home/phighley/_j3H.NGZ0FB.douglas" >type=AVC msg=audit(1171362189.263:62613): avc: denied { getattr } for pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171362189.263:62613): arch=c000003e syscall=4 success=yes exit=0 a0=61c7f0 a1=7fff3966b050 a2=7fff3966b050 a3=61c7f0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171362189.263:62613): path="/home/phighley/_j3H.NGZ0FB.douglas" >type=AVC msg=audit(1171362189.264:62614): avc: denied { link } for pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171362189.264:62614): arch=c000003e syscall=86 success=yes exit=0 a0=61c7f0 a1=61b530 a2=7fff3966af70 a3=61c7f0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171362189.264:62615): avc: denied { remove_name } for pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171362189.264:62615): avc: denied { unlink } for pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171362189.264:62615): arch=c000003e syscall=87 success=yes exit=0 a0=61c7f0 a1=61b530 a2=7fff3966af70 a3=61c7f0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171362189.264:62616): avc: denied { append } for pid=32227 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171362189.264:62616): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171362189.264:62617): avc: denied { lock } for pid=32227 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171362189.264:62617): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171362189.264:62617): path="/home/phighley/spamlog" >type=USER_ACCT msg=audit(1171362301.580:62618): user pid=32241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171362301.581:62619): login pid=32241 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171362301.584:62620): user pid=32241 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171362301.584:62621): user pid=32241 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171362601.912:62622): user pid=32280 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171362601.913:62623): login pid=32280 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171362601.915:62624): user pid=32281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171362601.915:62625): login pid=32281 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171362601.915:62626): user pid=32280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171362601.915:62627): user pid=32280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171362601.920:62628): user pid=32281 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171362601.920:62629): user pid=32281 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171362601.935:62630): user pid=32280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171362601.935:62631): user pid=32280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171362901.242:62632): user pid=32317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171362901.242:62633): login pid=32317 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171362901.245:62634): user pid=32317 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171362901.245:62635): user pid=32317 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171363201.570:62636): user pid=32350 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171363201.570:62637): login pid=32350 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171363201.572:62638): user pid=32351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171363201.572:62639): login pid=32351 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171363201.573:62640): user pid=32350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171363201.573:62641): user pid=32350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171363201.578:62642): user pid=32351 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171363201.578:62643): user pid=32351 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171363201.603:62644): user pid=32350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171363201.604:62645): user pid=32350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171363501.899:62646): user pid=32386 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171363501.900:62647): login pid=32386 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171363501.904:62648): user pid=32386 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171363501.904:62649): user pid=32386 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171363801.227:62650): user pid=32422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171363801.228:62651): login pid=32422 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171363801.230:62652): user pid=32423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171363801.230:62653): login pid=32423 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171363801.232:62654): user pid=32422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171363801.232:62655): user pid=32422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171363801.243:62656): user pid=32423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171363801.243:62657): user pid=32423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171363801.250:62658): user pid=32422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171363801.250:62659): user pid=32422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171364083.812:62660): avc: denied { getattr } for pid=32470 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171364083.812:62660): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff0d08b030 a2=7fff0d08b030 a3=6c6280 items=0 ppid=29238 pid=32470 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171364083.812:62660): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171364083.812:62661): avc: denied { read } for pid=32470 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171364083.812:62661): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=32470 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171364088.810:62662): avc: denied { append } for pid=32465 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171364088.810:62662): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=32460 pid=32465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171364101.572:62663): user pid=32474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171364101.572:62664): login pid=32474 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171364101.576:62665): user pid=32474 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171364101.576:62666): user pid=32474 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171364401.894:62667): user pid=32507 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171364401.894:62668): login pid=32507 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171364401.896:62669): user pid=32508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171364401.896:62670): login pid=32508 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171364401.898:62671): user pid=32509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171364401.898:62672): login pid=32509 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171364401.899:62673): user pid=32507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171364401.899:62674): user pid=32507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171364401.902:62675): user pid=32508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171364401.902:62676): user pid=32508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171364401.910:62677): user pid=32509 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171364401.910:62678): user pid=32509 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171364401.935:62679): user pid=32507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171364401.936:62680): user pid=32507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171364461.234:62681): user pid=32530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171364461.235:62682): login pid=32530 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171364461.238:62683): user pid=32530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171364461.238:62684): user pid=32530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171364462.120:62685): user pid=32530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171364462.120:62686): user pid=32530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171364701.127:62687): user pid=32566 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171364701.128:62688): login pid=32566 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171364701.132:62689): user pid=32566 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171364701.132:62690): user pid=32566 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171365001.468:62691): user pid=32602 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171365001.468:62692): user pid=32601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171365001.469:62693): login pid=32601 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171365001.469:62694): login pid=32602 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171365001.474:62695): user pid=32602 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171365001.474:62696): user pid=32602 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171365001.478:62697): user pid=32601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171365001.478:62698): user pid=32601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171365001.501:62699): user pid=32601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171365001.501:62700): user pid=32601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171365301.798:62701): user pid=32639 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171365301.798:62702): login pid=32639 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171365301.801:62703): user pid=32639 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171365301.801:62704): user pid=32639 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171365601.124:62705): user pid=32671 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171365601.124:62706): login pid=32671 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171365601.126:62707): user pid=32672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171365601.126:62708): login pid=32672 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171365601.127:62709): user pid=32671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171365601.127:62710): user pid=32671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171365601.131:62711): user pid=32672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171365601.131:62712): user pid=32672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171365601.145:62713): user pid=32671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171365601.145:62714): user pid=32671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171365901.460:62715): user pid=32706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171365901.460:62716): login pid=32706 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171365901.463:62717): user pid=32706 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171365901.463:62718): user pid=32706 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171366201.795:62719): user pid=32743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171366201.795:62720): login pid=32743 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171366201.797:62721): user pid=32744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171366201.797:62722): login pid=32744 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171366201.798:62723): user pid=32743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171366201.798:62724): user pid=32743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171366201.802:62725): user pid=32744 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171366201.803:62726): user pid=32744 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171366201.815:62727): user pid=32743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171366201.816:62728): user pid=32743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171366501.141:62729): user pid=313 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171366501.142:62730): login pid=313 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171366501.146:62731): user pid=313 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171366501.146:62732): user pid=313 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171366801.475:62733): user pid=348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171366801.475:62734): login pid=348 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171366801.477:62735): user pid=349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171366801.477:62736): login pid=349 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171366801.479:62737): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171366801.479:62738): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171366801.483:62739): user pid=349 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171366801.483:62740): user pid=349 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171366801.502:62741): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171366801.502:62742): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171367101.814:62743): user pid=388 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171367101.814:62744): login pid=388 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171367101.817:62745): user pid=388 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171367101.817:62746): user pid=388 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171367401.139:62747): user pid=437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171367401.139:62748): login pid=437 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171367401.141:62749): user pid=438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171367401.141:62750): login pid=438 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171367401.143:62751): user pid=437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171367401.143:62752): user pid=437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171367401.149:62753): user pid=438 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171367401.149:62754): user pid=438 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171367401.167:62755): user pid=437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171367401.167:62756): user pid=437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171367701.486:62757): user pid=479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171367701.486:62758): login pid=479 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171367701.490:62759): user pid=479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171367701.491:62760): user pid=479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171367884.536:62761): avc: denied { search } for pid=514 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171367884.536:62761): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=514 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171367884.537:62762): avc: denied { search } for pid=514 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171367884.537:62762): avc: denied { write } for pid=514 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171367884.537:62762): avc: denied { add_name } for pid=514 comm="pyzor" name="EjqsIV" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171367884.537:62762): avc: denied { create } for pid=514 comm="pyzor" name="EjqsIV" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171367884.537:62762): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=514 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171367884.537:62763): avc: denied { getattr } for pid=514 comm="pyzor" name="EjqsIV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171367884.537:62763): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff87ebb350 a2=7fff87ebb350 a3=3 items=0 ppid=29238 pid=514 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171367884.537:62763): path="/tmp/EjqsIV" >type=AVC msg=audit(1171367884.537:62764): avc: denied { write } for pid=514 comm="pyzor" name="EjqsIV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171367884.537:62764): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=514 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171367884.537:62764): path="/tmp/EjqsIV" >type=AVC msg=audit(1171367884.537:62765): avc: denied { remove_name } for pid=514 comm="pyzor" name="EjqsIV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171367884.537:62765): avc: denied { unlink } for pid=514 comm="pyzor" name="EjqsIV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171367884.537:62765): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=514 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171367884.540:62766): avc: denied { read } for pid=514 comm="pyzor" name="tmp2of2Ik" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171367884.540:62766): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=514 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171367884.540:62766): path=2F746D702F746D70326F6632496B202864656C6574656429 >type=AVC msg=audit(1171367889.530:62767): avc: denied { write } for pid=510 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171367889.530:62767): avc: denied { add_name } for pid=510 comm="procmail" name="_-H.Rfa0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171367889.530:62767): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=505 pid=510 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171367889.530:62768): avc: denied { remove_name } for pid=510 comm="procmail" name="_-H.Rfa0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171367889.530:62768): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=632520 a2=7fff2287c190 a3=61b650 items=0 ppid=505 pid=510 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171367889.531:62769): avc: denied { append } for pid=510 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171367889.531:62769): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=505 pid=510 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171368001.816:62770): user pid=525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171368001.816:62771): login pid=525 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171368001.819:62772): user pid=526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171368001.819:62773): login pid=526 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171368001.822:62774): user pid=525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171368001.822:62775): user pid=525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171368001.824:62776): user pid=526 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171368001.824:62777): user pid=526 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171368001.851:62778): user pid=525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171368001.852:62779): user pid=525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171368061.146:62780): user pid=541 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171368061.146:62781): login pid=541 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171368061.150:62782): user pid=541 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171368061.150:62783): user pid=541 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171368062.032:62784): user pid=541 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171368062.032:62785): user pid=541 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171368121.036:62786): user pid=563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171368121.037:62787): login pid=563 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171368121.041:62788): user pid=563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171368121.041:62789): user pid=563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171368301.041:62790): user pid=597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171368301.041:62791): login pid=597 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171368301.044:62792): user pid=597 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171368301.044:62793): user pid=597 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171368601.372:62794): user pid=631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171368601.372:62795): login pid=631 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171368601.373:62796): user pid=632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171368601.373:62797): login pid=632 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171368601.378:62798): user pid=631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171368601.378:62799): user pid=631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171368601.383:62800): user pid=632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171368601.383:62801): user pid=632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171368601.397:62802): user pid=631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171368601.398:62803): user pid=631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171368789.377:62804): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171368789.377:62804): arch=c000003e syscall=2 success=yes exit=12 a0=32bfbd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171368789.377:62805): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171368789.377:62805): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171368789.377:62805): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171368789.396:62806): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171368789.396:62806): arch=c000003e syscall=2 success=yes exit=9 a0=3559bd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171368790.236:62807): avc: denied { getattr } for pid=671 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171368790.236:62807): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffe42de280 a2=7fffe42de280 a3=6c6280 items=0 ppid=29238 pid=671 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171368790.236:62807): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171368790.236:62808): avc: denied { read } for pid=671 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171368790.236:62808): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=671 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171368795.198:62809): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171368795.198:62809): arch=c000003e syscall=62 success=yes exit=0 a0=29f a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171368795.206:62810): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171368795.206:62810): arch=c000003e syscall=86 success=yes exit=0 a0=30e5320 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171368795.206:62811): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171368795.206:62811): arch=c000003e syscall=87 success=yes exit=0 a0=30e5320 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171368795.207:62812): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171368795.207:62812): arch=c000003e syscall=2 success=yes exit=9 a0=30c4700 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171368795.232:62813): avc: denied { create } for pid=667 comm="procmail" name="_bK.bta0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171368795.232:62813): arch=c000003e syscall=2 success=yes exit=6 a0=623890 a1=c1 a2=124 a3=623890 items=0 ppid=662 pid=667 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171368795.232:62814): avc: denied { write } for pid=667 comm="procmail" name="_bK.bta0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171368795.232:62814): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=623890 items=0 ppid=662 pid=667 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171368795.232:62814): path="/home/dhighley/_bK.bta0FB.douglas" >type=AVC msg=audit(1171368795.233:62815): avc: denied { getattr } for pid=667 comm="procmail" name="_bK.bta0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171368795.233:62815): arch=c000003e syscall=4 success=yes exit=0 a0=623890 a1=7fff08aae4a0 a2=7fff08aae4a0 a3=623890 items=0 ppid=662 pid=667 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171368795.233:62815): path="/home/dhighley/_bK.bta0FB.douglas" >type=AVC msg=audit(1171368795.233:62816): avc: denied { link } for pid=667 comm="procmail" name="_bK.bta0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171368795.233:62816): arch=c000003e syscall=86 success=yes exit=0 a0=623890 a1=61b520 a2=7fff08aae3c0 a3=623890 items=0 ppid=662 pid=667 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171368795.233:62817): avc: denied { unlink } for pid=667 comm="procmail" name="_bK.bta0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171368795.233:62817): arch=c000003e syscall=87 success=yes exit=0 a0=623890 a1=61b520 a2=7fff08aae3c0 a3=623890 items=0 ppid=662 pid=667 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171368901.725:62818): user pid=683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171368901.725:62819): login pid=683 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171368901.728:62820): user pid=683 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171368901.728:62821): user pid=683 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171369201.050:62822): user pid=728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171369201.050:62823): login pid=728 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171369201.052:62824): user pid=729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171369201.052:62825): login pid=729 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171369201.055:62826): user pid=728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171369201.055:62827): user pid=728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171369201.057:62828): user pid=729 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171369201.057:62829): user pid=729 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171369201.087:62830): user pid=728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171369201.088:62831): user pid=728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171369501.380:62832): user pid=766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171369501.381:62833): login pid=766 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171369501.385:62834): user pid=766 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171369501.385:62835): user pid=766 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171369801.704:62836): user pid=801 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171369801.705:62837): login pid=801 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171369801.707:62838): user pid=802 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171369801.707:62839): login pid=802 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171369801.711:62840): user pid=801 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171369801.711:62841): user pid=801 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171369801.713:62842): user pid=802 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171369801.713:62843): user pid=802 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171369801.733:62844): user pid=801 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171369801.734:62845): user pid=801 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171370101.052:62846): user pid=839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171370101.052:62847): login pid=839 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171370101.056:62848): user pid=839 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171370101.056:62849): user pid=839 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171370401.394:62850): user pid=874 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171370401.394:62851): login pid=874 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171370401.396:62852): user pid=875 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171370401.396:62853): login pid=875 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171370401.397:62854): user pid=874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171370401.398:62855): user pid=874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171370401.408:62856): user pid=875 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171370401.409:62857): user pid=875 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171370401.416:62858): user pid=874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171370401.417:62859): user pid=874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171370701.730:62860): user pid=914 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171370701.731:62861): login pid=914 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171370701.735:62862): user pid=914 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171370701.735:62863): user pid=914 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171371001.067:62864): user pid=948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171371001.067:62865): login pid=948 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171371001.068:62866): user pid=947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171371001.068:62867): login pid=947 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171371001.073:62868): user pid=948 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171371001.073:62869): user pid=948 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171371001.079:62870): user pid=947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171371001.079:62871): user pid=947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171371001.100:62872): user pid=947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171371001.100:62873): user pid=947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171371092.902:62874): avc: denied { search } for pid=977 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171371092.902:62874): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=977 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171371092.903:62875): avc: denied { create } for pid=977 comm="pyzor" name="j0fYC9" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171371092.903:62875): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=977 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171371092.903:62876): avc: denied { getattr } for pid=977 comm="pyzor" name="j0fYC9" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171371092.903:62876): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe0996240 a2=7fffe0996240 a3=2 items=0 ppid=29238 pid=977 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171371092.903:62876): path="/tmp/j0fYC9" >type=AVC msg=audit(1171371092.903:62877): avc: denied { write } for pid=977 comm="pyzor" name="j0fYC9" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171371092.903:62877): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=29238 pid=977 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171371092.903:62877): path="/tmp/j0fYC9" >type=AVC msg=audit(1171371092.904:62878): avc: denied { unlink } for pid=977 comm="pyzor" name="j0fYC9" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171371092.904:62878): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=977 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171371092.905:62879): avc: denied { read } for pid=977 comm="pyzor" name="tmpKwCXrs" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171371092.905:62879): arch=c000003e syscall=0 success=yes exit=390 a0=4 a1=2aaaaf34d000 a2=1000 a3=4c items=0 ppid=29238 pid=977 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171371092.905:62879): path=2F746D702F746D704B7743587273202864656C6574656429 >type=USER_ACCT msg=audit(1171371301.415:62880): user pid=997 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171371301.415:62881): login pid=997 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171371301.419:62882): user pid=997 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171371301.419:62883): user pid=997 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171371601.755:62884): user pid=4706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171371601.756:62885): user pid=4707 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171371601.756:62886): login pid=4706 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171371601.756:62887): login pid=4707 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171371601.761:62888): user pid=4706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171371601.761:62889): user pid=4706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171371601.763:62890): user pid=4707 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171371601.763:62891): user pid=4707 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171371602.160:62892): user pid=4706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171371602.160:62893): user pid=4706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171371661.165:62894): user pid=4877 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171371661.165:62895): login pid=4877 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171371661.168:62896): user pid=4877 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171371661.168:62897): user pid=4877 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171371662.079:62898): user pid=4877 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171371662.080:62899): user pid=4877 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171371901.085:62900): user pid=5532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171371901.086:62901): login pid=5532 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171371901.092:62902): user pid=5532 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171371901.092:62903): user pid=5532 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171372184.676:62904): user pid=563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171372184.676:62905): user pid=563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171372201.679:62906): user pid=6160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171372201.679:62907): login pid=6160 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171372201.682:62908): user pid=6161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171372201.682:62909): user pid=6160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171372201.682:62910): login pid=6161 uid=0 old auid=4294967295 new auid=111 >type=CRED_ACQ msg=audit(1171372201.682:62911): user pid=6160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171372201.695:62912): user pid=6161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171372201.695:62913): user pid=6161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171372201.713:62914): user pid=6160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171372201.713:62915): user pid=6160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171372267.823:62916): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171372267.823:62916): arch=c000003e syscall=2 success=yes exit=12 a0=333e660 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171372267.823:62917): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171372267.823:62917): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171372267.823:62917): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171372267.836:62918): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171372267.836:62918): arch=c000003e syscall=2 success=yes exit=9 a0=33caa40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171372268.504:62919): avc: denied { search } for pid=6188 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171372268.504:62919): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171372268.505:62920): avc: denied { getattr } for pid=6188 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171372268.505:62920): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffc6397340 a2=7fffc6397340 a3=6c6280 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171372268.505:62920): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171372268.505:62921): avc: denied { read } for pid=6188 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171372268.505:62921): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171372268.506:62922): avc: denied { search } for pid=6188 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171372268.506:62922): avc: denied { write } for pid=6188 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171372268.506:62922): avc: denied { add_name } for pid=6188 comm="pyzor" name="NOic2Q" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171372268.506:62922): avc: denied { create } for pid=6188 comm="pyzor" name="NOic2Q" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171372268.506:62922): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171372268.506:62923): avc: denied { getattr } for pid=6188 comm="pyzor" name="NOic2Q" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171372268.506:62923): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffc6395c40 a2=7fffc6395c40 a3=2 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171372268.506:62923): path="/tmp/NOic2Q" >type=AVC msg=audit(1171372268.506:62924): avc: denied { write } for pid=6188 comm="pyzor" name="NOic2Q" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171372268.506:62924): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171372268.506:62924): path="/tmp/NOic2Q" >type=AVC msg=audit(1171372268.507:62925): avc: denied { remove_name } for pid=6188 comm="pyzor" name="NOic2Q" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171372268.507:62925): avc: denied { unlink } for pid=6188 comm="pyzor" name="NOic2Q" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171372268.507:62925): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171372268.513:62926): avc: denied { read } for pid=6188 comm="pyzor" name="tmpImUxLt" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171372268.513:62926): arch=c000003e syscall=0 success=yes exit=4096 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171372268.513:62926): path=2F746D702F746D70496D55784C74202864656C6574656429 >type=AVC msg=audit(1171372273.465:62927): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171372273.465:62927): arch=c000003e syscall=62 success=yes exit=0 a0=182c a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171372273.666:62928): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171372273.666:62928): arch=c000003e syscall=86 success=yes exit=0 a0=30d4600 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171372273.666:62929): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171372273.666:62929): arch=c000003e syscall=87 success=yes exit=0 a0=30d4600 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171372273.667:62930): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171372273.667:62930): arch=c000003e syscall=2 success=yes exit=9 a0=35ecfb0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171372273.696:62931): avc: denied { write } for pid=6184 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171372273.696:62931): avc: denied { add_name } for pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171372273.696:62931): avc: denied { create } for pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171372273.696:62931): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=6179 pid=6184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171372273.697:62932): avc: denied { write } for pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171372273.697:62932): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=6179 pid=6184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171372273.697:62932): path="/home/dhighley/_ogB.xjb0FB.douglas" >type=AVC msg=audit(1171372273.697:62933): avc: denied { getattr } for pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171372273.697:62933): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff3610ab00 a2=7fff3610ab00 a3=61b650 items=0 ppid=6179 pid=6184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171372273.697:62933): path="/home/dhighley/_ogB.xjb0FB.douglas" >type=AVC msg=audit(1171372273.697:62934): avc: denied { link } for pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171372273.697:62934): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61e6d0 a2=7fff3610aa20 a3=61b650 items=0 ppid=6179 pid=6184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171372273.697:62935): avc: denied { remove_name } for pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171372273.697:62935): avc: denied { unlink } for pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171372273.697:62935): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e6d0 a2=7fff3610aa20 a3=61b650 items=0 ppid=6179 pid=6184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171372273.697:62936): avc: denied { append } for pid=6184 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171372273.697:62936): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6179 pid=6184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1171372387.977:62937): user pid=32508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171372387.978:62938): user pid=32508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171372501.982:62939): user pid=6209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171372501.983:62940): login pid=6209 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171372501.989:62941): user pid=6209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171372501.989:62942): user pid=6209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171372801.319:62943): user pid=6244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171372801.319:62944): login pid=6244 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171372801.319:62945): user pid=6243 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171372801.319:62946): login pid=6243 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171372801.325:62947): user pid=6244 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171372801.325:62948): user pid=6244 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171372801.328:62949): user pid=6243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171372801.328:62950): user pid=6243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171372801.351:62951): user pid=6243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171372801.352:62952): user pid=6243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171373101.648:62953): user pid=6281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171373101.648:62954): login pid=6281 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171373101.652:62955): user pid=6281 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171373101.652:62956): user pid=6281 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171373401.976:62957): user pid=6319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171373401.977:62958): login pid=6319 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171373401.978:62959): user pid=6318 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171373401.978:62960): login pid=6318 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171373401.982:62961): user pid=6319 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171373401.982:62962): user pid=6319 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171373401.988:62963): user pid=6318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171373401.989:62964): user pid=6318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171373402.011:62965): user pid=6318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171373402.012:62966): user pid=6318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171373701.311:62967): user pid=6354 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171373701.311:62968): login pid=6354 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171373701.315:62969): user pid=6354 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171373701.315:62970): user pid=6354 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171374001.641:62971): user pid=6389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171374001.642:62972): login pid=6389 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171374001.644:62973): user pid=6390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171374001.645:62974): login pid=6390 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171374001.648:62975): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171374001.648:62976): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171374001.650:62977): user pid=6390 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171374001.650:62978): user pid=6390 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171374001.677:62979): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171374001.677:62980): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171374301.982:62981): user pid=6428 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171374301.982:62982): login pid=6428 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171374301.986:62983): user pid=6428 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171374301.986:62984): user pid=6428 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171374601.307:62985): user pid=6462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171374601.308:62986): login pid=6462 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171374601.310:62987): user pid=6463 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171374601.310:62988): login pid=6463 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171374601.311:62989): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171374601.311:62990): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171374601.319:62991): user pid=6463 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171374601.319:62992): user pid=6463 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171374601.328:62993): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171374601.328:62994): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171374853.903:62995): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171374853.903:62995): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171374853.903:62995): path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.29238" >type=AVC msg=audit(1171374853.904:62996): avc: denied { link } for pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171374853.904:62996): arch=c000003e syscall=86 success=yes exit=0 a0=35ec8e0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171374853.904:62997): avc: denied { unlink } for pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171374853.904:62997): arch=c000003e syscall=87 success=yes exit=0 a0=35ec8e0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171374853.905:62998): avc: denied { write } for pid=29238 comm="spamd" name="bayes_seen" dev=dm-0 ino=15630939 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171374853.905:62998): arch=c000003e syscall=2 success=yes exit=9 a0=3350b20 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171374853.924:62999): avc: denied { setattr } for pid=29238 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171374853.924:62999): arch=c000003e syscall=132 success=yes exit=0 a0=31ab3a0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171374853.925:63000): avc: denied { rename } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171374853.925:63000): arch=c000003e syscall=82 success=yes exit=0 a0=361e830 a1=3103ab0 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171374860.819:63001): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171374860.819:63001): arch=c000003e syscall=1 success=yes exit=1800 a0=a a1=31653d0 a2=708 a3=11 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171374860.819:63001): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171374860.831:63002): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171374860.831:63002): arch=c000003e syscall=2 success=yes exit=9 a0=31d1980 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171374861.556:63003): avc: denied { getattr } for pid=6505 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171374861.556:63003): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff204bb460 a2=7fff204bb460 a3=6c6280 items=0 ppid=29238 pid=6505 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171374861.556:63003): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171374861.556:63004): avc: denied { read } for pid=6505 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171374861.556:63004): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=6505 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171374866.519:63005): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171374866.519:63005): arch=c000003e syscall=62 success=yes exit=0 a0=1969 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171374866.563:63006): avc: denied { write } for pid=6501 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171374866.563:63006): avc: denied { add_name } for pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171374866.563:63006): avc: denied { create } for pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171374866.563:63006): arch=c000003e syscall=2 success=yes exit=6 a0=61cfc0 a1=c1 a2=124 a3=61cfc0 items=0 ppid=6496 pid=6501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171374866.563:63007): avc: denied { write } for pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171374866.563:63007): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cfc0 items=0 ppid=6496 pid=6501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171374866.563:63007): path="/home/dhighley/_llB.SMc0FB.douglas" >type=AVC msg=audit(1171374866.563:63008): avc: denied { getattr } for pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171374866.563:63008): arch=c000003e syscall=4 success=yes exit=0 a0=61cfc0 a1=7fff2d698090 a2=7fff2d698090 a3=61cfc0 items=0 ppid=6496 pid=6501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171374866.563:63008): path="/home/dhighley/_llB.SMc0FB.douglas" >type=AVC msg=audit(1171374866.563:63009): avc: denied { link } for pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171374866.563:63009): arch=c000003e syscall=86 success=yes exit=0 a0=61cfc0 a1=61d1c0 a2=7fff2d697fb0 a3=61cfc0 items=0 ppid=6496 pid=6501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171374866.563:63010): avc: denied { remove_name } for pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171374866.563:63010): avc: denied { unlink } for pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171374866.563:63010): arch=c000003e syscall=87 success=yes exit=0 a0=61cfc0 a1=61d1c0 a2=7fff2d697fb0 a3=61cfc0 items=0 ppid=6496 pid=6501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171374901.649:63011): user pid=6510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171374901.649:63012): login pid=6510 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171374901.653:63013): user pid=6510 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171374901.653:63014): user pid=6510 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171375201.976:63015): user pid=6546 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171375201.977:63016): login pid=6546 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171375201.979:63017): user pid=6547 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171375201.979:63018): login pid=6547 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171375201.981:63019): user pid=6546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171375201.981:63020): user pid=6546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171375201.983:63021): user pid=6548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171375201.984:63022): login pid=6548 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171375201.990:63023): user pid=6547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171375201.991:63024): user pid=6547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171375201.992:63025): user pid=6548 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171375201.992:63026): user pid=6548 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171375202.011:63027): user pid=6546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171375202.011:63028): user pid=6546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171375233.522:63029): avc: denied { search } for pid=6577 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171375233.522:63029): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=6577 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171375233.523:63030): avc: denied { create } for pid=6577 comm="pyzor" name="RIg2wa" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171375233.523:63030): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=6577 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171375233.523:63031): avc: denied { getattr } for pid=6577 comm="pyzor" name="RIg2wa" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171375233.523:63031): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff3d6abb40 a2=7fff3d6abb40 a3=3 items=0 ppid=29238 pid=6577 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171375233.523:63031): path="/tmp/RIg2wa" >type=AVC msg=audit(1171375233.523:63032): avc: denied { write } for pid=6577 comm="pyzor" name="RIg2wa" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171375233.523:63032): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=6577 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171375233.523:63032): path="/tmp/RIg2wa" >type=AVC msg=audit(1171375233.523:63033): avc: denied { unlink } for pid=6577 comm="pyzor" name="RIg2wa" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171375233.523:63033): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=6577 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171375233.525:63034): avc: denied { read } for pid=6577 comm="pyzor" name="tmpxEU7qT" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171375233.525:63034): arch=c000003e syscall=0 success=yes exit=2427 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=6577 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171375233.525:63034): path=2F746D702F746D70784555377154202864656C6574656429 >type=USER_ACCT msg=audit(1171375261.329:63035): user pid=6582 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171375261.329:63036): login pid=6582 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171375261.332:63037): user pid=6582 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171375261.332:63038): user pid=6582 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171375262.233:63039): user pid=6582 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171375262.234:63040): user pid=6582 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171375501.240:63041): user pid=6624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171375501.241:63042): login pid=6624 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171375501.245:63043): user pid=6624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171375501.245:63044): user pid=6624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171375634.749:63045): avc: denied { search } for pid=6657 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171375634.749:63045): avc: denied { write } for pid=6657 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171375634.749:63045): avc: denied { add_name } for pid=6657 comm="pyzor" name="P7mPla" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171375634.749:63045): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=6657 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171375634.750:63046): avc: denied { remove_name } for pid=6657 comm="pyzor" name="P7mPla" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171375634.750:63046): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=6657 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171375639.747:63047): avc: denied { write } for pid=6653 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171375639.747:63047): avc: denied { add_name } for pid=6653 comm="procmail" name="_9nB.XYc0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171375639.747:63047): arch=c000003e syscall=2 success=yes exit=6 a0=61fe20 a1=c1 a2=124 a3=61fe20 items=0 ppid=6648 pid=6653 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171375639.748:63048): avc: denied { remove_name } for pid=6653 comm="procmail" name="_9nB.XYc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171375639.748:63048): arch=c000003e syscall=87 success=yes exit=0 a0=61fe20 a1=61fe00 a2=7fff5e0eba00 a3=61fe20 items=0 ppid=6648 pid=6653 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171375801.578:63049): user pid=6673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171375801.579:63050): login pid=6673 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171375801.579:63051): user pid=6674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171375801.579:63052): login pid=6674 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171375801.584:63053): user pid=6673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171375801.584:63054): user pid=6673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171375801.589:63055): user pid=6674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171375801.589:63056): user pid=6674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171375801.607:63057): user pid=6673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171375801.608:63058): user pid=6673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171375886.488:63059): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171375886.488:63059): arch=c000003e syscall=2 success=yes exit=9 a0=3038de0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171375887.218:63060): avc: denied { getattr } for pid=6699 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171375887.218:63060): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffbc4143c0 a2=7fffbc4143c0 a3=6c6280 items=0 ppid=29238 pid=6699 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171375887.218:63060): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171375887.218:63061): avc: denied { read } for pid=6699 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171375887.218:63061): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=6699 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171375892.180:63062): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171375892.180:63062): arch=c000003e syscall=62 success=yes exit=0 a0=1a2b a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171375892.328:63063): avc: denied { ioctl } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171375892.328:63063): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171375892.328:63063): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.29238" >type=AVC msg=audit(1171375892.328:63064): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171375892.328:63064): arch=c000003e syscall=86 success=yes exit=0 a0=2022f20 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171375892.328:63065): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171375892.328:63065): arch=c000003e syscall=87 success=yes exit=0 a0=2022f20 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171375892.329:63066): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171375892.329:63066): arch=c000003e syscall=2 success=yes exit=9 a0=329bf20 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171375892.339:63067): avc: denied { create } for pid=6695 comm="procmail" name="_noB.Ucc0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171375892.339:63067): arch=c000003e syscall=2 success=yes exit=6 a0=61c890 a1=c1 a2=124 a3=61c890 items=0 ppid=6692 pid=6695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171375892.339:63068): avc: denied { write } for pid=6695 comm="procmail" name="_noB.Ucc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171375892.339:63068): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c890 items=0 ppid=6692 pid=6695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171375892.339:63068): path="/home/dhighley/_noB.Ucc0FB.douglas" >type=AVC msg=audit(1171375892.340:63069): avc: denied { getattr } for pid=6695 comm="procmail" name="_noB.Ucc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171375892.340:63069): arch=c000003e syscall=4 success=yes exit=0 a0=61c890 a1=7fff58dd67c0 a2=7fff58dd67c0 a3=61c890 items=0 ppid=6692 pid=6695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171375892.340:63069): path="/home/dhighley/_noB.Ucc0FB.douglas" >type=AVC msg=audit(1171375892.340:63070): avc: denied { link } for pid=6695 comm="procmail" name="_noB.Ucc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171375892.340:63070): arch=c000003e syscall=86 success=yes exit=0 a0=61c890 a1=61b530 a2=7fff58dd66e0 a3=61c890 items=0 ppid=6692 pid=6695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171375892.340:63071): avc: denied { unlink } for pid=6695 comm="procmail" name="_noB.Ucc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171375892.340:63071): arch=c000003e syscall=87 success=yes exit=0 a0=61c890 a1=61b530 a2=7fff58dd66e0 a3=61c890 items=0 ppid=6692 pid=6695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171376015.991:63072): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171376015.991:63072): arch=c000003e syscall=2 success=yes exit=12 a0=32668e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171376101.928:63073): user pid=6734 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171376101.928:63074): login pid=6734 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171376101.931:63075): user pid=6734 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171376101.932:63076): user pid=6734 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171376401.257:63077): user pid=6769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171376401.257:63078): login pid=6769 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171376401.257:63079): user pid=6770 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171376401.258:63080): login pid=6770 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171376401.262:63081): user pid=6769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171376401.262:63082): user pid=6769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171376401.265:63083): user pid=6770 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171376401.265:63084): user pid=6770 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171376401.293:63085): user pid=6769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171376401.293:63086): user pid=6769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171376701.590:63087): user pid=6808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171376701.590:63088): login pid=6808 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171376701.594:63089): user pid=6808 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171376701.594:63090): user pid=6808 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171377001.919:63091): user pid=6865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171377001.919:63092): login pid=6865 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171377001.921:63093): user pid=6866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171377001.921:63094): login pid=6866 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171377001.923:63095): user pid=6865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171377001.923:63096): user pid=6865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171377001.925:63097): user pid=6866 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171377001.925:63098): user pid=6866 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171377001.945:63099): user pid=6865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171377001.945:63100): user pid=6865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171377036.995:63101): avc: denied { create } for pid=6887 comm="pyzor" name="pnkQw5" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171377036.995:63101): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=6887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171377036.996:63102): avc: denied { getattr } for pid=6887 comm="pyzor" name="pnkQw5" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171377036.996:63102): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff74471d20 a2=7fff74471d20 a3=2 items=0 ppid=29238 pid=6887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171377036.996:63102): path="/tmp/pnkQw5" >type=AVC msg=audit(1171377036.996:63103): avc: denied { write } for pid=6887 comm="pyzor" name="pnkQw5" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171377036.996:63103): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=6887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171377036.996:63103): path="/tmp/pnkQw5" >type=AVC msg=audit(1171377036.996:63104): avc: denied { unlink } for pid=6887 comm="pyzor" name="pnkQw5" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171377036.996:63104): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=6887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171377036.997:63105): avc: denied { read } for pid=6887 comm="pyzor" name="tmpnfGqaS" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171377036.997:63105): arch=c000003e syscall=0 success=yes exit=681 a0=4 a1=2aaaaf34d000 a2=1000 a3=83 items=0 ppid=29238 pid=6887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171377036.997:63105): path=2F746D702F746D706E6647716153202864656C6574656429 >type=AVC msg=audit(1171377085.727:63106): avc: denied { append } for pid=6898 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171377085.727:63106): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6895 pid=6898 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171377301.256:63107): user pid=6922 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171377301.257:63108): login pid=6922 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171377301.260:63109): user pid=6922 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171377301.261:63110): user pid=6922 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171377444.646:63111): user pid=6958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171377444.646:63112): user pid=6958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171377444.657:63113): user pid=6958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171377444.679:63114): login pid=6958 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171377444.679:63115): user pid=6958 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171377444.767:63116): user pid=6962 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)' >type=CRED_REFR msg=audit(1171377444.776:63117): user pid=6962 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1171377534.662:63118): user pid=6958 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171377534.662:63119): user pid=6958 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171377601.584:63120): user pid=7026 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171377601.584:63121): login pid=7026 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171377601.586:63122): user pid=7027 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171377601.586:63123): login pid=7027 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171377601.588:63124): user pid=7026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171377601.588:63125): user pid=7026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171377601.598:63126): user pid=7027 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171377601.598:63127): user pid=7027 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171377601.611:63128): user pid=7026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171377601.611:63129): user pid=7026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171377619.940:63130): user pid=7039 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171377619.943:63131): user pid=7039 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171377619.944:63132): login pid=7039 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171377619.944:63133): user pid=7039 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1171377619.955:63134): user pid=7044 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171377620.051:63135): user pid=7039 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)' >type=CRED_DISP msg=audit(1171377687.237:63136): user pid=7039 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171377687.237:63137): user pid=7039 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171377693.843:63138): user pid=7090 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171377693.845:63139): user pid=7090 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171377693.846:63140): login pid=7090 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171377693.846:63141): user pid=7090 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1171377693.857:63142): user pid=7093 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171377693.945:63143): user pid=7090 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)' >type=USER_AUTH msg=audit(1171377702.612:63144): user pid=7126 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171377702.612:63145): user pid=7126 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1171377702.628:63146): user pid=7126 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1171377702.628:63147): user pid=7126 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171377901.920:63148): user pid=7197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171377901.921:63149): login pid=7197 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171377901.925:63150): user pid=7197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171377901.925:63151): user pid=7197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171377910.586:63152): user pid=7126 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1171377910.586:63153): user pid=7126 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1171377912.948:63154): user pid=7090 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171377912.949:63155): user pid=7090 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171378201.247:63156): user pid=7233 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171378201.247:63157): login pid=7233 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171378201.249:63158): user pid=7234 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171378201.250:63159): login pid=7234 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171378201.252:63160): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171378201.252:63161): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171378201.256:63162): user pid=7234 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171378201.256:63163): user pid=7234 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171378201.272:63164): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171378201.272:63165): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171378501.595:63166): user pid=7272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171378501.595:63167): login pid=7272 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171378501.598:63168): user pid=7272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171378501.598:63169): user pid=7272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171378618.903:63170): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171378618.903:63170): arch=c000003e syscall=2 success=yes exit=12 a0=325d500 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171378618.903:63171): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171378618.903:63171): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171378618.903:63171): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171378618.909:63172): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171378618.909:63172): arch=c000003e syscall=2 success=yes exit=9 a0=329be40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171378619.627:63173): avc: denied { search } for pid=7304 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171378619.627:63173): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171378619.628:63174): avc: denied { getattr } for pid=7304 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171378619.628:63174): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff6c7356e0 a2=7fff6c7356e0 a3=6c6280 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171378619.628:63174): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171378619.628:63175): avc: denied { read } for pid=7304 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171378619.628:63175): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171378619.628:63176): avc: denied { search } for pid=7304 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171378619.628:63176): avc: denied { write } for pid=7304 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171378619.628:63176): avc: denied { add_name } for pid=7304 comm="pyzor" name="2xEdKE" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171378619.628:63176): avc: denied { create } for pid=7304 comm="pyzor" name="2xEdKE" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171378619.628:63176): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171378619.629:63177): avc: denied { getattr } for pid=7304 comm="pyzor" name="2xEdKE" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171378619.629:63177): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff6c733fe0 a2=7fff6c733fe0 a3=2 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171378619.629:63177): path="/tmp/2xEdKE" >type=AVC msg=audit(1171378619.629:63178): avc: denied { write } for pid=7304 comm="pyzor" name="2xEdKE" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171378619.629:63178): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171378619.629:63178): path="/tmp/2xEdKE" >type=AVC msg=audit(1171378619.629:63179): avc: denied { remove_name } for pid=7304 comm="pyzor" name="2xEdKE" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171378619.629:63179): avc: denied { unlink } for pid=7304 comm="pyzor" name="2xEdKE" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171378619.629:63179): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171378619.634:63180): avc: denied { read } for pid=7304 comm="pyzor" name="tmp9vGI05" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171378619.634:63180): arch=c000003e syscall=0 success=yes exit=759 a0=4 a1=2aaaaf34d000 a2=1000 a3=b8 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171378619.634:63180): path=2F746D702F746D70397647493035202864656C6574656429 >type=AVC msg=audit(1171378624.589:63181): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171378624.589:63181): arch=c000003e syscall=62 success=yes exit=0 a0=1c88 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171378624.640:63182): avc: denied { ioctl } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171378624.640:63182): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171378624.640:63182): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.29238" >type=AVC msg=audit(1171378624.641:63183): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171378624.641:63183): arch=c000003e syscall=86 success=yes exit=0 a0=321a270 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171378624.641:63184): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171378624.641:63184): arch=c000003e syscall=87 success=yes exit=0 a0=321a270 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171378624.642:63185): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171378624.642:63185): arch=c000003e syscall=2 success=yes exit=9 a0=2fd3ef0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171378801.935:63186): user pid=7323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171378801.935:63187): login pid=7323 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171378801.936:63188): user pid=7324 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171378801.937:63189): login pid=7324 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171378801.938:63190): user pid=7323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171378801.938:63191): user pid=7323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171378801.950:63192): user pid=7324 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171378801.950:63193): user pid=7324 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171378801.963:63194): user pid=7323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171378801.963:63195): user pid=7323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171378861.278:63196): user pid=7338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171378861.279:63197): login pid=7338 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171378861.282:63198): user pid=7338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171378861.282:63199): user pid=7338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171378862.199:63200): user pid=7338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171378862.199:63201): user pid=7338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171379101.206:63202): user pid=7377 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171379101.207:63203): login pid=7377 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171379101.211:63204): user pid=7377 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171379101.211:63205): user pid=7377 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171379401.540:63206): user pid=7420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171379401.540:63207): login pid=7420 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171379401.542:63208): user pid=7421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171379401.543:63209): login pid=7421 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171379401.543:63210): user pid=7420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171379401.543:63211): user pid=7420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171379401.555:63212): user pid=7421 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171379401.555:63213): user pid=7421 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171379401.562:63214): user pid=7420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171379401.562:63215): user pid=7420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171379568.624:63216): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171379568.624:63216): arch=c000003e syscall=2 success=yes exit=12 a0=32b7d20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171379569.762:63217): avc: denied { search } for pid=7455 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171379569.762:63217): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=7455 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171379575.270:63218): avc: denied { write } for pid=7451 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171379575.270:63218): avc: denied { add_name } for pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171379575.270:63218): avc: denied { create } for pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171379575.270:63218): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=7446 pid=7451 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171379575.270:63219): avc: denied { write } for pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171379575.270:63219): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=7446 pid=7451 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171379575.270:63219): path="/home/dhighley/_b0B.3Vd0FB.douglas" >type=AVC msg=audit(1171379575.271:63220): avc: denied { getattr } for pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171379575.271:63220): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff2c15eb50 a2=7fff2c15eb50 a3=61b650 items=0 ppid=7446 pid=7451 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171379575.271:63220): path="/home/dhighley/_b0B.3Vd0FB.douglas" >type=AVC msg=audit(1171379575.271:63221): avc: denied { link } for pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171379575.271:63221): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61f530 a2=7fff2c15ea70 a3=61b650 items=0 ppid=7446 pid=7451 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171379575.271:63222): avc: denied { remove_name } for pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171379575.271:63222): avc: denied { unlink } for pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171379575.271:63222): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61f530 a2=7fff2c15ea70 a3=61b650 items=0 ppid=7446 pid=7451 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171379575.271:63223): avc: denied { append } for pid=7451 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171379575.271:63223): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7446 pid=7451 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171379701.883:63224): user pid=7468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171379701.884:63225): login pid=7468 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171379701.886:63226): user pid=7468 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171379701.887:63227): user pid=7468 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171379709.062:63228): avc: denied { create } for pid=7485 comm="pyzor" name="4323Br" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171379709.062:63228): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=7485 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171379709.062:63229): avc: denied { getattr } for pid=7485 comm="pyzor" name="4323Br" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171379709.062:63229): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd1c3a0d0 a2=7fffd1c3a0d0 a3=3 items=0 ppid=29238 pid=7485 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171379709.062:63229): path="/tmp/4323Br" >type=AVC msg=audit(1171379709.062:63230): avc: denied { write } for pid=7485 comm="pyzor" name="4323Br" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171379709.062:63230): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=29238 pid=7485 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171379709.062:63230): path="/tmp/4323Br" >type=AVC msg=audit(1171379709.062:63231): avc: denied { unlink } for pid=7485 comm="pyzor" name="4323Br" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171379709.062:63231): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=7485 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171379709.064:63232): avc: denied { read } for pid=7485 comm="pyzor" name="tmp3u53_S" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171379709.064:63232): arch=c000003e syscall=0 success=yes exit=1490 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=7485 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171379709.064:63232): path=2F746D702F746D70337535335F53202864656C6574656429 >type=AVC msg=audit(1171379714.066:63233): avc: denied { append } for pid=7481 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171379714.066:63233): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7478 pid=7481 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171380001.209:63234): user pid=7526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171380001.210:63235): login pid=7526 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171380001.211:63236): user pid=7525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171380001.212:63237): login pid=7525 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171380001.214:63238): user pid=7526 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171380001.214:63239): user pid=7526 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171380001.224:63240): user pid=7525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171380001.224:63241): user pid=7525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171380001.244:63242): user pid=7525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171380001.245:63243): user pid=7525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171380301.542:63244): user pid=7562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171380301.542:63245): login pid=7562 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171380301.545:63246): user pid=7562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171380301.545:63247): user pid=7562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171380601.878:63248): user pid=7597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171380601.878:63249): login pid=7597 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171380601.880:63250): user pid=7598 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171380601.880:63251): login pid=7598 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171380601.882:63252): user pid=7597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171380601.882:63253): user pid=7597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171380601.891:63254): user pid=7598 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171380601.892:63255): user pid=7598 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171380601.901:63256): user pid=7597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171380601.902:63257): user pid=7597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171380781.233:63258): avc: denied { search } for pid=7639 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171380781.233:63258): avc: denied { write } for pid=7639 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171380781.233:63258): avc: denied { add_name } for pid=7639 comm="pyzor" name="n9lvQ4" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171380781.233:63258): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=7639 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171380781.233:63259): avc: denied { remove_name } for pid=7639 comm="pyzor" name="n9lvQ4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171380781.233:63259): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=7639 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171380786.606:63260): avc: denied { write } for pid=7635 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171380786.606:63260): avc: denied { add_name } for pid=7635 comm="procmail" name="_T3B.yod0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171380786.606:63260): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=7631 pid=7635 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171380786.607:63261): avc: denied { remove_name } for pid=7635 comm="procmail" name="_T3B.yod0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171380786.607:63261): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=621700 a2=7fff78a64380 a3=61b650 items=0 ppid=7631 pid=7635 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171380901.214:63262): user pid=7650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171380901.214:63263): login pid=7650 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171380901.218:63264): user pid=7650 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171380901.218:63265): user pid=7650 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171381201.546:63266): user pid=7684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171381201.546:63267): login pid=7684 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171381201.549:63268): user pid=7685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171381201.549:63269): login pid=7685 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171381201.552:63270): user pid=7684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171381201.552:63271): user pid=7684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171381201.554:63272): user pid=7685 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171381201.554:63273): user pid=7685 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171381201.581:63274): user pid=7684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171381201.581:63275): user pid=7684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171381501.885:63276): user pid=7722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171381501.885:63277): login pid=7722 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171381501.889:63278): user pid=7722 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171381501.889:63279): user pid=7722 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171381801.212:63280): user pid=7756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171381801.212:63281): login pid=7756 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171381801.214:63282): user pid=7757 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171381801.214:63283): login pid=7757 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171381801.216:63284): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171381801.216:63285): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171381801.220:63286): user pid=7757 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171381801.220:63287): user pid=7757 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171381801.234:63288): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171381801.235:63289): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171382022.346:63290): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171382022.346:63290): arch=c000003e syscall=2 success=yes exit=12 a0=33ceaf0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171382022.346:63291): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171382022.346:63291): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171382022.346:63291): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171382022.357:63292): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171382022.357:63292): arch=c000003e syscall=2 success=yes exit=9 a0=325d100 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171382027.404:63293): avc: denied { getattr } for pid=7797 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171382027.404:63293): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffdb3f83a0 a2=7fffdb3f83a0 a3=6c6280 items=0 ppid=29238 pid=7797 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171382027.404:63293): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171382027.404:63294): avc: denied { read } for pid=7797 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171382027.404:63294): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=7797 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171382032.431:63295): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171382032.431:63295): arch=c000003e syscall=86 success=yes exit=0 a0=31dfc00 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171382032.431:63296): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171382032.431:63296): arch=c000003e syscall=87 success=yes exit=0 a0=31dfc00 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171382032.432:63297): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171382032.432:63297): arch=c000003e syscall=2 success=yes exit=10 a0=33cb8f0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171382032.453:63298): avc: denied { create } for pid=7792 comm="procmail" name="_w5B.Q8d0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171382032.453:63298): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=7787 pid=7792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171382032.453:63299): avc: denied { write } for pid=7792 comm="procmail" name="_w5B.Q8d0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171382032.453:63299): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=7787 pid=7792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171382032.453:63299): path="/home/dhighley/_w5B.Q8d0FB.douglas" >type=AVC msg=audit(1171382032.454:63300): avc: denied { getattr } for pid=7792 comm="procmail" name="_w5B.Q8d0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171382032.454:63300): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff906bc0b0 a2=7fff906bc0b0 a3=61b650 items=0 ppid=7787 pid=7792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171382032.454:63300): path="/home/dhighley/_w5B.Q8d0FB.douglas" >type=AVC msg=audit(1171382032.454:63301): avc: denied { link } for pid=7792 comm="procmail" name="_w5B.Q8d0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171382032.454:63301): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61efb0 a2=7fff906bbfd0 a3=61b650 items=0 ppid=7787 pid=7792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171382032.454:63302): avc: denied { unlink } for pid=7792 comm="procmail" name="_w5B.Q8d0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171382032.454:63302): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61efb0 a2=7fff906bbfd0 a3=61b650 items=0 ppid=7787 pid=7792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171382101.544:63303): user pid=7804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171382101.545:63304): login pid=7804 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171382101.549:63305): user pid=7804 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171382101.549:63306): user pid=7804 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171382401.876:63307): user pid=7840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171382401.876:63308): login pid=7840 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171382401.879:63309): user pid=7841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171382401.879:63310): login pid=7841 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171382401.882:63311): user pid=7840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171382401.882:63312): user pid=7840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171382401.884:63313): user pid=7841 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171382401.884:63314): user pid=7841 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171382401.904:63315): user pid=7840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171382401.904:63316): user pid=7840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171382461.214:63317): user pid=7856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171382461.214:63318): login pid=7856 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171382461.218:63319): user pid=7856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171382461.219:63320): user pid=7856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171382462.121:63321): user pid=7856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171382462.121:63322): user pid=7856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171382701.131:63323): user pid=7894 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171382701.131:63324): login pid=7894 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171382701.135:63325): user pid=7894 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171382701.135:63326): user pid=7894 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171383001.472:63327): user pid=7939 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171383001.472:63328): login pid=7939 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171383001.475:63329): user pid=7940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171383001.475:63330): login pid=7940 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171383001.475:63331): user pid=7939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171383001.476:63332): user pid=7939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171383001.487:63333): user pid=7940 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171383001.487:63334): user pid=7940 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171383001.495:63335): user pid=7939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171383001.495:63336): user pid=7939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171383237.410:63337): user pid=6547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171383237.410:63338): user pid=6547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171383301.415:63339): user pid=7978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171383301.415:63340): login pid=7978 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171383301.420:63341): user pid=7978 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171383301.420:63342): user pid=7978 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171383601.741:63343): user pid=8012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171383601.742:63344): login pid=8012 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171383601.743:63345): user pid=8013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171383601.743:63346): login pid=8013 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171383601.748:63347): user pid=8012 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171383601.748:63348): user pid=8012 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171383601.753:63349): user pid=8013 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171383601.753:63350): user pid=8013 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171383601.768:63351): user pid=8012 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171383601.768:63352): user pid=8012 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171383901.082:63353): user pid=8047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171383901.083:63354): login pid=8047 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171383901.087:63355): user pid=8047 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171383901.087:63356): user pid=8047 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171384201.424:63357): user pid=8087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171384201.424:63358): login pid=8087 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171384201.425:63359): user pid=8088 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171384201.425:63360): login pid=8088 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171384201.430:63361): user pid=8087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171384201.430:63362): user pid=8087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171384201.431:63363): user pid=8088 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171384201.431:63364): user pid=8088 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171384201.461:63365): user pid=8087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171384201.461:63366): user pid=8087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171384501.770:63367): user pid=8122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171384501.770:63368): login pid=8122 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171384501.773:63369): user pid=8122 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171384501.773:63370): user pid=8122 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171384801.094:63371): user pid=8155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171384801.094:63372): login pid=8155 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171384801.096:63373): user pid=8156 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171384801.096:63374): login pid=8156 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171384801.099:63375): user pid=8155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171384801.099:63376): user pid=8155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171384801.102:63377): user pid=8156 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171384801.102:63378): user pid=8156 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171384801.117:63379): user pid=8155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171384801.117:63380): user pid=8155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171384938.747:63381): avc: denied { setattr } for pid=29238 comm="spamd" name="bayes.lock" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171384938.747:63381): arch=c000003e syscall=132 success=yes exit=0 a0=31ab3a0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171384938.748:63382): avc: denied { rename } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171384938.748:63382): arch=c000003e syscall=82 success=yes exit=0 a0=361e830 a1=3103ab0 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171384944.357:63383): avc: denied { search } for pid=8192 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171384944.357:63383): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171384944.357:63384): avc: denied { getattr } for pid=8192 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171384944.357:63384): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffc7757700 a2=7fffc7757700 a3=6c6280 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171384944.357:63384): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171384944.357:63385): avc: denied { read } for pid=8192 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171384944.357:63385): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171384944.367:63386): avc: denied { search } for pid=8192 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171384944.367:63386): avc: denied { write } for pid=8192 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171384944.367:63386): avc: denied { add_name } for pid=8192 comm="pyzor" name="ebI5rd" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171384944.367:63386): avc: denied { create } for pid=8192 comm="pyzor" name="ebI5rd" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171384944.367:63386): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171384944.367:63387): avc: denied { getattr } for pid=8192 comm="pyzor" name="ebI5rd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171384944.367:63387): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffc7756000 a2=7fffc7756000 a3=2 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171384944.367:63387): path="/tmp/ebI5rd" >type=AVC msg=audit(1171384944.367:63388): avc: denied { write } for pid=8192 comm="pyzor" name="ebI5rd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171384944.367:63388): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171384944.367:63388): path="/tmp/ebI5rd" >type=AVC msg=audit(1171384944.368:63389): avc: denied { remove_name } for pid=8192 comm="pyzor" name="ebI5rd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171384944.368:63389): avc: denied { unlink } for pid=8192 comm="pyzor" name="ebI5rd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171384944.368:63389): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171384944.369:63390): avc: denied { read } for pid=8192 comm="pyzor" name="tmpG-4P89" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171384944.369:63390): arch=c000003e syscall=0 success=yes exit=516 a0=4 a1=2aaaaf34d000 a2=1000 a3=13 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171384944.369:63390): path=2F746D702F746D70472D34503839202864656C6574656429 >type=AVC msg=audit(1171384951.486:63391): avc: denied { append } for pid=8187 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171384951.486:63391): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=8182 pid=8187 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171384951.486:63392): avc: denied { lock } for pid=8187 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171384951.486:63392): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=8182 pid=8187 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171384951.486:63392): path="/home/phighley/spamlog" >type=USER_ACCT msg=audit(1171385101.431:63393): user pid=8206 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171385101.431:63394): login pid=8206 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171385101.434:63395): user pid=8206 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171385101.434:63396): user pid=8206 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171385401.756:63397): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171385401.756:63398): login pid=8241 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171385401.759:63399): user pid=8242 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171385401.759:63400): login pid=8242 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171385401.761:63401): user pid=8241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171385401.761:63402): user pid=8241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171385401.763:63403): user pid=8242 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171385401.763:63404): user pid=8242 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171385401.790:63405): user pid=8241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171385401.790:63406): user pid=8241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171385701.089:63407): user pid=8279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171385701.089:63408): login pid=8279 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171385701.093:63409): user pid=8279 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171385701.094:63410): user pid=8279 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171386001.429:63411): user pid=8317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171386001.429:63412): login pid=8317 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171386001.431:63413): user pid=8318 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171386001.431:63414): login pid=8318 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171386001.433:63415): user pid=8317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171386001.433:63416): user pid=8317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171386001.435:63417): user pid=8319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171386001.436:63418): login pid=8319 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171386001.436:63419): user pid=8318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171386001.436:63420): user pid=8318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171386001.448:63421): user pid=8319 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171386001.448:63422): user pid=8319 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171386001.469:63423): user pid=8317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171386001.469:63424): user pid=8317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171386061.779:63425): user pid=8338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171386061.779:63426): login pid=8338 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171386061.782:63427): user pid=8338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171386061.782:63428): user pid=8338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171386062.686:63429): user pid=8338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171386062.686:63430): user pid=8338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171386127.506:63431): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171386127.506:63431): arch=c000003e syscall=2 success=yes exit=13 a0=3477720 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171386127.507:63432): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171386127.507:63432): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171386127.507:63432): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171386127.525:63433): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171386127.525:63433): arch=c000003e syscall=2 success=yes exit=9 a0=346c850 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171386128.661:63434): avc: denied { getattr } for pid=8370 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171386128.661:63434): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffa1499440 a2=7fffa1499440 a3=6c6280 items=0 ppid=29238 pid=8370 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171386128.661:63434): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171386128.661:63435): avc: denied { read } for pid=8370 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171386128.661:63435): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=8370 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171386133.622:63436): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171386133.622:63436): arch=c000003e syscall=62 success=yes exit=0 a0=20b2 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171386133.631:63437): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171386133.631:63437): arch=c000003e syscall=86 success=yes exit=0 a0=346f6e0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171386133.631:63438): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171386133.631:63438): arch=c000003e syscall=87 success=yes exit=0 a0=346f6e0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171386133.632:63439): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171386133.632:63439): arch=c000003e syscall=2 success=yes exit=9 a0=32d0820 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171386133.643:63440): avc: denied { write } for pid=8366 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171386133.643:63440): avc: denied { add_name } for pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171386133.643:63440): avc: denied { create } for pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171386133.643:63440): arch=c000003e syscall=2 success=yes exit=6 a0=6238f0 a1=c1 a2=124 a3=6238f0 items=0 ppid=8361 pid=8366 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171386133.644:63441): avc: denied { write } for pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171386133.644:63441): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=6238f0 items=0 ppid=8361 pid=8366 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171386133.644:63441): path="/home/dhighley/_uCC.V8e0FB.douglas" >type=AVC msg=audit(1171386133.644:63442): avc: denied { getattr } for pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171386133.644:63442): arch=c000003e syscall=4 success=yes exit=0 a0=6238f0 a1=7fffeca97490 a2=7fffeca97490 a3=6238f0 items=0 ppid=8361 pid=8366 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171386133.644:63442): path="/home/dhighley/_uCC.V8e0FB.douglas" >type=AVC msg=audit(1171386133.644:63443): avc: denied { link } for pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171386133.644:63443): arch=c000003e syscall=86 success=yes exit=0 a0=6238f0 a1=61b520 a2=7fffeca973b0 a3=6238f0 items=0 ppid=8361 pid=8366 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171386133.644:63444): avc: denied { remove_name } for pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171386133.644:63444): avc: denied { unlink } for pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171386133.644:63444): arch=c000003e syscall=87 success=yes exit=0 a0=6238f0 a1=61b520 a2=7fffeca973b0 a3=6238f0 items=0 ppid=8361 pid=8366 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171386133.644:63445): avc: denied { append } for pid=8366 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171386133.644:63445): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=8361 pid=8366 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171386301.692:63446): user pid=8386 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171386301.693:63447): login pid=8386 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171386301.697:63448): user pid=8386 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171386301.697:63449): user pid=8386 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171386601.018:63450): user pid=8426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171386601.018:63451): login pid=8426 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171386601.020:63452): user pid=8427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171386601.020:63453): login pid=8427 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171386601.021:63454): user pid=8426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171386601.021:63455): user pid=8426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171386601.027:63456): user pid=8427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171386601.027:63457): user pid=8427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171386601.046:63458): user pid=8426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171386601.047:63459): user pid=8426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171386901.356:63460): user pid=8463 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171386901.356:63461): login pid=8463 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171386901.359:63462): user pid=8463 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171386901.359:63463): user pid=8463 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171387201.682:63464): user pid=8497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171387201.682:63465): login pid=8497 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171387201.685:63466): user pid=8498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171387201.685:63467): login pid=8498 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171387201.688:63468): user pid=8497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171387201.688:63469): user pid=8497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171387201.690:63470): user pid=8498 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171387201.690:63471): user pid=8498 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171387201.709:63472): user pid=8497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171387201.709:63473): user pid=8497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171387501.018:63474): user pid=8533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171387501.018:63475): login pid=8533 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171387501.022:63476): user pid=8533 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171387501.022:63477): user pid=8533 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171387801.349:63478): user pid=8570 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171387801.349:63479): login pid=8570 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171387801.352:63480): user pid=8571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171387801.352:63481): login pid=8571 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171387801.354:63482): user pid=8570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171387801.354:63483): user pid=8570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171387801.356:63484): user pid=8571 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171387801.356:63485): user pid=8571 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171387801.376:63486): user pid=8570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171387801.376:63487): user pid=8570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171388101.686:63488): user pid=8611 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171388101.687:63489): login pid=8611 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171388101.690:63490): user pid=8611 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171388101.691:63491): user pid=8611 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171388401.015:63492): user pid=8646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171388401.015:63493): login pid=8646 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171388401.017:63494): user pid=8647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171388401.018:63495): login pid=8647 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171388401.019:63496): user pid=8646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171388401.020:63497): user pid=8646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171388401.029:63498): user pid=8647 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171388401.029:63499): user pid=8647 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171388401.037:63500): user pid=8646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171388401.038:63501): user pid=8646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171388701.351:63502): user pid=8682 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171388701.351:63503): login pid=8682 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171388701.355:63504): user pid=8682 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171388701.355:63505): user pid=8682 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171389001.675:63506): user pid=8720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171389001.675:63507): login pid=8720 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171389001.678:63508): user pid=8721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171389001.678:63509): login pid=8721 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171389001.681:63510): user pid=8720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171389001.681:63511): user pid=8720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171389001.683:63512): user pid=8721 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171389001.683:63513): user pid=8721 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171389001.702:63514): user pid=8720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171389001.703:63515): user pid=8720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171389301.005:63516): user pid=8755 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171389301.005:63517): login pid=8755 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171389301.008:63518): user pid=8755 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171389301.008:63519): user pid=8755 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171389601.335:63520): user pid=8791 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171389601.335:63521): login pid=8791 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171389601.337:63522): user pid=8790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171389601.337:63523): login pid=8790 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171389601.340:63524): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171389601.340:63525): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171389601.342:63526): user pid=8791 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171389601.342:63527): user pid=8791 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171389601.369:63528): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171389601.369:63529): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171389661.662:63530): user pid=8807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171389661.662:63531): login pid=8807 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171389661.666:63532): user pid=8807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171389661.666:63533): user pid=8807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171389662.574:63534): user pid=8807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171389662.574:63535): user pid=8807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171389901.580:63536): user pid=8843 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171389901.581:63537): login pid=8843 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171389901.583:63538): user pid=8843 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171389901.583:63539): user pid=8843 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171390201.903:63540): user pid=8878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171390201.903:63541): login pid=8878 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171390201.905:63542): user pid=8879 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171390201.905:63544): login pid=8879 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171390201.905:63543): user pid=8878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171390201.905:63545): user pid=8878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171390201.916:63546): user pid=8879 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171390201.917:63547): user pid=8879 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171390201.924:63548): user pid=8878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171390201.925:63549): user pid=8878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171390501.256:63550): user pid=8914 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171390501.256:63551): login pid=8914 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171390501.259:63552): user pid=8914 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171390501.259:63553): user pid=8914 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171390801.587:63554): user pid=8948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171390801.587:63555): login pid=8948 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171390801.589:63556): user pid=8949 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171390801.589:63557): login pid=8949 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171390801.590:63558): user pid=8948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171390801.590:63559): user pid=8948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171390801.602:63560): user pid=8949 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171390801.602:63561): user pid=8949 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171390801.608:63562): user pid=8948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171390801.609:63563): user pid=8948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171391101.929:63564): user pid=8985 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171391101.929:63565): login pid=8985 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171391101.932:63566): user pid=8985 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171391101.932:63567): user pid=8985 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171391198.864:63568): avc: denied { search } for pid=9012 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171391198.864:63568): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=9012 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171391401.251:63569): user pid=9032 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171391401.251:63570): login pid=9032 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171391401.253:63571): user pid=9033 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171391401.253:63572): login pid=9033 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171391401.257:63573): user pid=9032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171391401.257:63574): user pid=9032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171391401.260:63575): user pid=9033 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171391401.260:63576): user pid=9033 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171391401.287:63577): user pid=9032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171391401.287:63578): user pid=9032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171391596.663:63579): avc: denied { create } for pid=9074 comm="pyzor" name="Ll-YAp" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171391596.663:63579): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=9074 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171391596.664:63580): avc: denied { getattr } for pid=9074 comm="pyzor" name="Ll-YAp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171391596.664:63580): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff414a2940 a2=7fff414a2940 a3=3 items=0 ppid=29238 pid=9074 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171391596.664:63580): path="/tmp/Ll-YAp" >type=AVC msg=audit(1171391596.664:63581): avc: denied { write } for pid=9074 comm="pyzor" name="Ll-YAp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171391596.664:63581): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=9074 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171391596.664:63581): path="/tmp/Ll-YAp" >type=AVC msg=audit(1171391596.664:63582): avc: denied { unlink } for pid=9074 comm="pyzor" name="Ll-YAp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171391596.664:63582): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=9074 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171391596.665:63583): avc: denied { read } for pid=9074 comm="pyzor" name="tmpp7m6ll" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171391596.665:63583): arch=c000003e syscall=0 success=yes exit=347 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=9074 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171391596.665:63583): path=2F746D702F746D7070376D366C6C202864656C6574656429 >type=AVC msg=audit(1171391601.656:63584): avc: denied { write } for pid=9069 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171391601.656:63584): avc: denied { add_name } for pid=9069 comm="procmail" name="_tNC.xRg0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171391601.656:63584): arch=c000003e syscall=2 success=yes exit=6 a0=61d1a0 a1=c1 a2=124 a3=61d1a0 items=0 ppid=9064 pid=9069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171391601.657:63585): avc: denied { remove_name } for pid=9069 comm="procmail" name="_tNC.xRg0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171391601.657:63585): arch=c000003e syscall=87 success=yes exit=0 a0=61d1a0 a1=61b510 a2=7fffb6011930 a3=61d1a0 items=0 ppid=9064 pid=9069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171391601.657:63586): avc: denied { append } for pid=9069 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171391601.657:63586): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=9064 pid=9069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171391701.591:63587): user pid=9086 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171391701.592:63588): login pid=9086 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171391701.595:63589): user pid=9086 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171391701.595:63590): user pid=9086 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171392001.932:63591): user pid=9122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171392001.932:63592): login pid=9122 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171392001.935:63593): user pid=9123 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171392001.935:63594): login pid=9123 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171392001.938:63595): user pid=9122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171392001.938:63596): user pid=9122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171392001.940:63597): user pid=9123 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171392001.940:63598): user pid=9123 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171392001.963:63599): user pid=9122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171392001.963:63600): user pid=9122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171392301.281:63601): user pid=9158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171392301.281:63602): login pid=9158 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171392301.285:63603): user pid=9158 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171392301.285:63604): user pid=9158 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171392601.618:63605): user pid=9197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171392601.618:63606): login pid=9197 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171392601.619:63607): user pid=9198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171392601.620:63608): login pid=9198 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171392601.621:63609): user pid=9197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171392601.621:63610): user pid=9197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171392601.626:63611): user pid=9198 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171392601.626:63612): user pid=9198 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171392601.643:63613): user pid=9197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171392601.643:63614): user pid=9197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171392901.964:63615): user pid=9244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171392901.964:63616): login pid=9244 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171392901.967:63617): user pid=9244 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171392901.967:63618): user pid=9244 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171393201.296:63619): user pid=9277 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171393201.297:63620): login pid=9277 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171393201.299:63621): user pid=9278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171393201.300:63622): login pid=9278 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171393201.303:63623): user pid=9277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171393201.303:63624): user pid=9277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171393201.305:63625): user pid=9278 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171393201.305:63626): user pid=9278 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171393201.332:63627): user pid=9277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171393201.332:63628): user pid=9277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171393261.635:63629): user pid=9293 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171393261.635:63630): login pid=9293 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171393261.639:63631): user pid=9293 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171393261.639:63632): user pid=9293 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171393262.533:63633): user pid=9293 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171393262.533:63634): user pid=9293 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171393501.541:63635): user pid=9328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171393501.542:63636): login pid=9328 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171393501.546:63637): user pid=9328 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171393501.546:63638): user pid=9328 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171393801.877:63639): user pid=9362 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171393801.877:63640): login pid=9362 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171393801.879:63641): user pid=9363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171393801.880:63642): login pid=9363 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171393801.881:63643): user pid=9362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171393801.881:63644): user pid=9362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171393801.886:63645): user pid=9363 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171393801.887:63646): user pid=9363 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171393801.900:63647): user pid=9362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171393801.900:63648): user pid=9362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171393987.502:63649): user pid=8318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171393987.503:63650): user pid=8318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171394101.507:63651): user pid=9400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171394101.508:63652): login pid=9400 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171394101.511:63653): user pid=9400 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171394101.512:63654): user pid=9400 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171394401.847:63655): user pid=9433 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171394401.847:63656): login pid=9433 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171394401.848:63657): user pid=9434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171394401.849:63658): login pid=9434 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171394401.850:63659): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171394401.850:63660): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171394401.859:63661): user pid=9434 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171394401.859:63662): user pid=9434 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171394401.868:63663): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171394401.868:63664): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171394701.197:63665): user pid=9469 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171394701.197:63666): login pid=9469 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171394701.200:63667): user pid=9469 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171394701.200:63668): user pid=9469 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171395001.527:63669): user pid=9502 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171395001.528:63670): login pid=9502 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171395001.530:63671): user pid=9503 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171395001.530:63672): login pid=9503 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171395001.532:63673): user pid=9502 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171395001.532:63674): user pid=9502 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171395001.537:63675): user pid=9503 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171395001.537:63676): user pid=9503 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171395001.563:63677): user pid=9502 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171395001.563:63678): user pid=9502 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171395301.875:63679): user pid=9537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171395301.875:63680): login pid=9537 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171395301.879:63681): user pid=9537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171395301.879:63682): user pid=9537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171395502.017:63683): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171395502.017:63683): arch=c000003e syscall=2 success=yes exit=12 a0=302f530 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171395502.018:63684): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171395502.018:63684): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171395502.018:63684): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171395502.023:63685): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171395502.023:63685): arch=c000003e syscall=2 success=yes exit=9 a0=3131900 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171395502.877:63686): avc: denied { getattr } for pid=9573 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171395502.877:63686): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff750cb140 a2=7fff750cb140 a3=6c6280 items=0 ppid=29238 pid=9573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171395502.877:63686): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171395502.878:63687): avc: denied { read } for pid=9573 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171395502.878:63687): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=9573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171395504.002:63688): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171395504.002:63688): arch=c000003e syscall=86 success=yes exit=0 a0=3300040 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171395504.002:63689): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171395504.002:63689): arch=c000003e syscall=87 success=yes exit=0 a0=3300040 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171395504.003:63690): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171395504.003:63690): arch=c000003e syscall=2 success=yes exit=9 a0=30bff20 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171395504.013:63691): avc: denied { create } for pid=9568 comm="procmail" name="_gVC.wOh0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171395504.013:63691): arch=c000003e syscall=2 success=yes exit=6 a0=61cb10 a1=c1 a2=124 a3=61cb10 items=0 ppid=9563 pid=9568 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171395504.014:63692): avc: denied { write } for pid=9568 comm="procmail" name="_gVC.wOh0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171395504.014:63692): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cb10 items=0 ppid=9563 pid=9568 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171395504.014:63692): path="/home/dhighley/_gVC.wOh0FB.douglas" >type=AVC msg=audit(1171395504.014:63693): avc: denied { getattr } for pid=9568 comm="procmail" name="_gVC.wOh0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171395504.014:63693): arch=c000003e syscall=4 success=yes exit=0 a0=61cb10 a1=7fff40a74470 a2=7fff40a74470 a3=61cb10 items=0 ppid=9563 pid=9568 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171395504.014:63693): path="/home/dhighley/_gVC.wOh0FB.douglas" >type=AVC msg=audit(1171395504.014:63694): avc: denied { link } for pid=9568 comm="procmail" name="_gVC.wOh0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171395504.014:63694): arch=c000003e syscall=86 success=yes exit=0 a0=61cb10 a1=61b510 a2=7fff40a74390 a3=61cb10 items=0 ppid=9563 pid=9568 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171395504.014:63695): avc: denied { unlink } for pid=9568 comm="procmail" name="_gVC.wOh0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171395504.014:63695): arch=c000003e syscall=87 success=yes exit=0 a0=61cb10 a1=61b510 a2=7fff40a74390 a3=61cb10 items=0 ppid=9563 pid=9568 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171395601.203:63696): user pid=9591 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171395601.203:63697): login pid=9591 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171395601.204:63698): user pid=9592 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171395601.204:63699): login pid=9592 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171395601.209:63700): user pid=9591 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171395601.209:63701): user pid=9591 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171395601.210:63702): user pid=9592 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171395601.210:63703): user pid=9592 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171395601.238:63704): user pid=9591 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171395601.239:63705): user pid=9591 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171395901.540:63706): user pid=9630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171395901.540:63707): login pid=9630 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171395901.544:63708): user pid=9630 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171395901.544:63709): user pid=9630 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171396072.536:63710): avc: denied { search } for pid=9663 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171396072.536:63710): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=9663 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171396072.538:63711): avc: denied { search } for pid=9663 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171396072.538:63711): avc: denied { write } for pid=9663 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171396072.538:63711): avc: denied { add_name } for pid=9663 comm="pyzor" name="noRrk4" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171396072.538:63711): avc: denied { create } for pid=9663 comm="pyzor" name="noRrk4" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171396072.538:63711): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=9663 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171396072.538:63712): avc: denied { getattr } for pid=9663 comm="pyzor" name="noRrk4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171396072.538:63712): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff6af9edb0 a2=7fff6af9edb0 a3=3 items=0 ppid=29238 pid=9663 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171396072.538:63712): path="/tmp/noRrk4" >type=AVC msg=audit(1171396072.538:63713): avc: denied { write } for pid=9663 comm="pyzor" name="noRrk4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171396072.538:63713): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=29238 pid=9663 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171396072.538:63713): path="/tmp/noRrk4" >type=AVC msg=audit(1171396072.538:63714): avc: denied { remove_name } for pid=9663 comm="pyzor" name="noRrk4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171396072.538:63714): avc: denied { unlink } for pid=9663 comm="pyzor" name="noRrk4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171396072.538:63714): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=9663 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171396072.539:63715): avc: denied { read } for pid=9663 comm="pyzor" name="tmpJ2Q6yG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171396072.539:63715): arch=c000003e syscall=0 success=yes exit=1431 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=9663 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171396072.539:63715): path=2F746D702F746D704A3251367947202864656C6574656429 >type=AVC msg=audit(1171396077.498:63716): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171396077.498:63716): arch=c000003e syscall=62 success=yes exit=0 a0=25bf a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171396077.667:63717): avc: denied { append } for pid=9659 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171396077.667:63717): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=9654 pid=9659 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171396201.866:63718): user pid=9676 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171396201.866:63719): login pid=9676 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171396201.869:63720): user pid=9675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171396201.869:63721): login pid=9675 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171396201.870:63722): user pid=9676 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171396201.870:63723): user pid=9676 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171396201.880:63724): user pid=9675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171396201.880:63725): user pid=9675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171396201.901:63726): user pid=9675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171396201.901:63727): user pid=9675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171396501.214:63728): user pid=9713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171396501.214:63729): login pid=9713 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171396501.218:63730): user pid=9713 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171396501.219:63731): user pid=9713 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171396801.538:63732): user pid=9759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171396801.538:63733): login pid=9759 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171396801.540:63734): user pid=9760 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171396801.541:63735): login pid=9760 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171396801.543:63736): user pid=9761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171396801.543:63737): login pid=9761 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171396801.544:63738): user pid=9759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171396801.544:63739): user pid=9759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171396801.551:63740): user pid=9760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171396801.551:63741): user pid=9760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171396801.553:63742): user pid=9761 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171396801.553:63743): user pid=9761 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171396801.571:63744): user pid=9759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171396801.572:63745): user pid=9759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171396861.879:63746): user pid=9783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171396861.879:63747): login pid=9783 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171396861.883:63748): user pid=9783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171396861.883:63749): user pid=9783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171396862.765:63750): user pid=9783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171396862.765:63751): user pid=9783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171397101.772:63752): user pid=9819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171397101.772:63753): login pid=9819 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171397101.776:63754): user pid=9819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171397101.776:63755): user pid=9819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171397401.105:63756): user pid=9855 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171397401.106:63757): login pid=9855 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171397401.108:63758): user pid=9856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171397401.108:63759): login pid=9856 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171397401.108:63760): user pid=9855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171397401.108:63761): user pid=9855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171397401.119:63762): user pid=9856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171397401.120:63763): user pid=9856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171397401.126:63764): user pid=9855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171397401.127:63765): user pid=9855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171397450.656:63766): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171397450.656:63766): arch=c000003e syscall=2 success=yes exit=12 a0=33b8ba0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171397450.656:63767): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171397450.656:63767): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171397450.656:63767): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171397450.667:63768): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171397450.667:63768): arch=c000003e syscall=2 success=yes exit=9 a0=32fff80 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171397454.443:63769): avc: denied { getattr } for pid=9880 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171397454.443:63769): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffe57496f0 a2=7fffe57496f0 a3=6c6280 items=0 ppid=29238 pid=9880 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171397454.443:63769): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171397454.443:63770): avc: denied { read } for pid=9880 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171397454.443:63770): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=9880 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171397459.405:63771): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171397459.405:63771): arch=c000003e syscall=62 success=yes exit=0 a0=2698 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171397459.417:63772): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171397459.417:63772): arch=c000003e syscall=86 success=yes exit=0 a0=3106cb0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171397459.417:63773): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171397459.417:63773): arch=c000003e syscall=87 success=yes exit=0 a0=3106cb0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171397459.418:63774): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171397459.418:63774): arch=c000003e syscall=2 success=yes exit=9 a0=3324b20 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171397459.456:63775): avc: denied { write } for pid=9876 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171397459.456:63775): avc: denied { add_name } for pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171397459.456:63775): avc: denied { create } for pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171397459.456:63775): arch=c000003e syscall=2 success=yes exit=6 a0=61e9a0 a1=c1 a2=124 a3=61e9a0 items=0 ppid=9871 pid=9876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171397459.457:63776): avc: denied { write } for pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171397459.457:63776): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61e9a0 items=0 ppid=9871 pid=9876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171397459.457:63776): path="/home/dhighley/_UaC.Tth0FB.douglas" >type=AVC msg=audit(1171397459.457:63777): avc: denied { getattr } for pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171397459.457:63777): arch=c000003e syscall=4 success=yes exit=0 a0=61e9a0 a1=7fff28846240 a2=7fff28846240 a3=61e9a0 items=0 ppid=9871 pid=9876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171397459.457:63777): path="/home/dhighley/_UaC.Tth0FB.douglas" >type=AVC msg=audit(1171397459.457:63778): avc: denied { link } for pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171397459.457:63778): arch=c000003e syscall=86 success=yes exit=0 a0=61e9a0 a1=61b520 a2=7fff28846160 a3=61e9a0 items=0 ppid=9871 pid=9876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171397459.457:63779): avc: denied { remove_name } for pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171397459.457:63779): avc: denied { unlink } for pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171397459.457:63779): arch=c000003e syscall=87 success=yes exit=0 a0=61e9a0 a1=61b520 a2=7fff28846160 a3=61e9a0 items=0 ppid=9871 pid=9876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171397701.439:63780): user pid=9908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171397701.439:63781): login pid=9908 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171397701.443:63782): user pid=9908 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171397701.443:63783): user pid=9908 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171398001.779:63784): user pid=9947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171398001.779:63785): login pid=9947 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171398001.781:63786): user pid=9948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171398001.781:63787): login pid=9948 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171398001.783:63788): user pid=9947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171398001.783:63789): user pid=9947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171398001.793:63790): user pid=9948 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171398001.793:63791): user pid=9948 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171398001.803:63792): user pid=9947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171398001.803:63793): user pid=9947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171398301.126:63794): user pid=9984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171398301.126:63795): login pid=9984 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171398301.129:63796): user pid=9984 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171398301.130:63797): user pid=9984 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171398601.449:63798): user pid=10019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171398601.450:63799): login pid=10019 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171398601.452:63800): user pid=10020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171398601.453:63801): login pid=10020 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171398601.453:63802): user pid=10019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171398601.453:63803): user pid=10019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171398601.462:63804): user pid=10020 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171398601.462:63805): user pid=10020 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171398601.473:63806): user pid=10019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171398601.473:63807): user pid=10019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171398901.789:63808): user pid=10056 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171398901.789:63809): login pid=10056 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171398901.793:63810): user pid=10056 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171398901.793:63811): user pid=10056 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171399201.113:63812): user pid=10090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171399201.113:63813): login pid=10090 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171399201.115:63814): user pid=10091 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171399201.115:63815): login pid=10091 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171399201.116:63816): user pid=10090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171399201.116:63817): user pid=10090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171399201.119:63818): user pid=10091 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171399201.119:63819): user pid=10091 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171399201.137:63820): user pid=10090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171399201.137:63821): user pid=10090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171399501.460:63822): user pid=10128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171399501.460:63823): login pid=10128 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171399501.464:63824): user pid=10128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171399501.464:63825): user pid=10128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171399801.783:63826): user pid=10160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171399801.783:63827): login pid=10160 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171399801.785:63828): user pid=10161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171399801.786:63829): login pid=10161 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171399801.788:63830): user pid=10160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171399801.788:63831): user pid=10160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171399801.799:63832): user pid=10161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171399801.799:63833): user pid=10161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171399801.807:63834): user pid=10160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171399801.807:63835): user pid=10160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171400101.136:63836): user pid=10195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171400101.136:63837): login pid=10195 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171400101.139:63838): user pid=10195 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171400101.139:63839): user pid=10195 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171400393.238:63840): avc: denied { search } for pid=10239 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171400393.238:63840): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=10239 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171400393.239:63841): avc: denied { create } for pid=10239 comm="pyzor" name="sbJwG5" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171400393.239:63841): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=10239 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171400393.240:63842): avc: denied { getattr } for pid=10239 comm="pyzor" name="sbJwG5" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171400393.240:63842): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff5a8a8150 a2=7fff5a8a8150 a3=2 items=0 ppid=29238 pid=10239 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171400393.240:63842): path="/tmp/sbJwG5" >type=AVC msg=audit(1171400393.240:63843): avc: denied { write } for pid=10239 comm="pyzor" name="sbJwG5" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171400393.240:63843): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=29238 pid=10239 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171400393.240:63843): path="/tmp/sbJwG5" >type=AVC msg=audit(1171400393.240:63844): avc: denied { unlink } for pid=10239 comm="pyzor" name="sbJwG5" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171400393.240:63844): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=10239 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171400393.242:63845): avc: denied { read } for pid=10239 comm="pyzor" name="tmpJb2rVd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171400393.242:63845): arch=c000003e syscall=0 success=yes exit=951 a0=4 a1=2aaaaf34d000 a2=1000 a3=90 items=0 ppid=29238 pid=10239 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171400393.242:63845): path=2F746D702F746D704A6232725664202864656C6574656429 >type=USER_ACCT msg=audit(1171400401.469:63846): user pid=10240 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171400401.470:63847): login pid=10240 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171400401.472:63848): user pid=10241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171400401.472:63849): login pid=10241 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171400401.475:63850): user pid=10240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171400401.475:63851): user pid=10240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171400401.477:63852): user pid=10241 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171400401.477:63853): user pid=10241 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171400401.497:63854): user pid=10240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171400401.498:63855): user pid=10240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171400461.811:63856): user pid=10255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171400461.812:63857): login pid=10255 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171400461.815:63858): user pid=10255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171400461.816:63859): user pid=10255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171400462.726:63860): user pid=10255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171400462.726:63861): user pid=10255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171400701.735:63862): user pid=10291 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171400701.735:63863): login pid=10291 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171400701.740:63864): user pid=10291 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171400701.740:63865): user pid=10291 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171401001.075:63866): user pid=10328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171401001.076:63867): login pid=10328 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171401001.076:63868): user pid=10327 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171401001.076:63869): login pid=10327 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171401001.081:63870): user pid=10328 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171401001.081:63871): user pid=10328 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171401001.085:63872): user pid=10327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171401001.085:63873): user pid=10327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171401001.109:63874): user pid=10327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171401001.109:63875): user pid=10327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171401301.405:63876): user pid=10364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171401301.405:63877): login pid=10364 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171401301.407:63878): user pid=10364 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171401301.408:63879): user pid=10364 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171401601.737:63880): user pid=10397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171401601.737:63881): login pid=10397 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171401601.738:63882): user pid=10396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171401601.738:63883): login pid=10396 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171401601.741:63884): user pid=10396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171401601.741:63885): user pid=10396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171401601.743:63886): user pid=10397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171401601.743:63887): user pid=10397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171401601.761:63888): user pid=10396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171401601.762:63889): user pid=10396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171401751.981:63890): avc: denied { search } for pid=10429 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171401751.981:63890): avc: denied { write } for pid=10429 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171401751.981:63890): avc: denied { add_name } for pid=10429 comm="pyzor" name="t9rl2j" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171401751.981:63890): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=10429 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171401751.982:63891): avc: denied { remove_name } for pid=10429 comm="pyzor" name="t9rl2j" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171401751.982:63891): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=10429 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171401901.075:63892): user pid=10442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171401901.075:63893): login pid=10442 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171401901.079:63894): user pid=10442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171401901.079:63895): user pid=10442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171402013.286:63896): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171402013.286:63896): arch=c000003e syscall=2 success=yes exit=12 a0=346f440 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171402013.286:63897): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171402013.286:63897): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171402013.286:63897): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171402013.294:63898): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171402013.294:63898): arch=c000003e syscall=2 success=yes exit=9 a0=346b570 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171402013.886:63899): avc: denied { getattr } for pid=10474 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171402013.886:63899): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9bc83c30 a2=7fff9bc83c30 a3=6c6280 items=0 ppid=29238 pid=10474 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171402013.886:63899): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171402013.886:63900): avc: denied { read } for pid=10474 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171402013.886:63900): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=10474 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171402018.848:63901): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171402018.848:63901): arch=c000003e syscall=62 success=yes exit=0 a0=28ea a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171402018.868:63902): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171402018.868:63902): arch=c000003e syscall=86 success=yes exit=0 a0=31ae2d0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171402018.868:63903): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171402018.868:63903): arch=c000003e syscall=87 success=yes exit=0 a0=31ae2d0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171402018.869:63904): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171402018.869:63904): arch=c000003e syscall=2 success=yes exit=9 a0=35b9ba0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171402196.393:63905): avc: denied { write } for pid=10493 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171402196.393:63905): avc: denied { add_name } for pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171402196.393:63905): avc: denied { create } for pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171402196.393:63905): arch=c000003e syscall=2 success=yes exit=6 a0=61d7b0 a1=c1 a2=124 a3=61d7b0 items=0 ppid=10490 pid=10493 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171402196.393:63906): avc: denied { write } for pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171402196.393:63906): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61d7b0 items=0 ppid=10490 pid=10493 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171402196.393:63906): path="/home/dhighley/_9jC.U3i0FB.douglas" >type=AVC msg=audit(1171402196.393:63907): avc: denied { getattr } for pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171402196.393:63907): arch=c000003e syscall=4 success=yes exit=0 a0=61d7b0 a1=7fffbf7eb1e0 a2=7fffbf7eb1e0 a3=61d7b0 items=0 ppid=10490 pid=10493 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171402196.393:63907): path="/home/dhighley/_9jC.U3i0FB.douglas" >type=AVC msg=audit(1171402196.394:63908): avc: denied { link } for pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171402196.394:63908): arch=c000003e syscall=86 success=yes exit=0 a0=61d7b0 a1=61b520 a2=7fffbf7eb100 a3=61d7b0 items=0 ppid=10490 pid=10493 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171402196.394:63909): avc: denied { remove_name } for pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171402196.394:63909): avc: denied { unlink } for pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171402196.394:63909): arch=c000003e syscall=87 success=yes exit=0 a0=61d7b0 a1=61b520 a2=7fffbf7eb100 a3=61d7b0 items=0 ppid=10490 pid=10493 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171402196.394:63910): avc: denied { append } for pid=10493 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171402196.394:63910): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=10490 pid=10493 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171402201.406:63911): user pid=10501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171402201.407:63912): login pid=10501 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171402201.407:63913): user pid=10500 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171402201.407:63914): login pid=10500 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171402201.412:63915): user pid=10501 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171402201.412:63916): user pid=10501 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171402201.415:63917): user pid=10500 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171402201.415:63918): user pid=10500 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171402201.449:63919): user pid=10500 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171402201.449:63920): user pid=10500 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171402501.737:63921): user pid=10550 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171402501.737:63922): login pid=10550 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171402501.741:63923): user pid=10550 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171402501.741:63924): user pid=10550 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171402702.140:63925): avc: denied { search } for pid=10582 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171402702.140:63925): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=10582 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171402702.142:63926): avc: denied { create } for pid=10582 comm="pyzor" name="sDAljh" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171402702.142:63926): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=10582 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171402702.142:63927): avc: denied { getattr } for pid=10582 comm="pyzor" name="sDAljh" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171402702.142:63927): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd622c040 a2=7fffd622c040 a3=3 items=0 ppid=29238 pid=10582 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171402702.142:63927): path="/tmp/sDAljh" >type=AVC msg=audit(1171402702.142:63928): avc: denied { write } for pid=10582 comm="pyzor" name="sDAljh" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171402702.142:63928): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=10582 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171402702.142:63928): path="/tmp/sDAljh" >type=AVC msg=audit(1171402702.142:63929): avc: denied { unlink } for pid=10582 comm="pyzor" name="sDAljh" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171402702.142:63929): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=10582 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171402702.143:63930): avc: denied { read } for pid=10582 comm="pyzor" name="tmpMTmcsz" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171402702.143:63930): arch=c000003e syscall=0 success=yes exit=2572 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8774 items=0 ppid=29238 pid=10582 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171402702.143:63930): path=2F746D702F746D704D546D63737A202864656C6574656429 >type=AVC msg=audit(1171402707.129:63931): avc: denied { append } for pid=10578 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171402707.129:63931): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=10575 pid=10578 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171402801.076:63932): user pid=10593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171402801.076:63933): login pid=10593 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171402801.078:63934): user pid=10594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171402801.078:63935): login pid=10594 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171402801.083:63936): user pid=10593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171402801.083:63937): user pid=10593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171402801.088:63938): user pid=10594 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171402801.088:63939): user pid=10594 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171402801.106:63940): user pid=10593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171402801.106:63941): user pid=10593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171403101.429:63942): user pid=10632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171403101.429:63943): login pid=10632 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171403101.436:63944): user pid=10632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171403101.436:63945): user pid=10632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171403401.768:63946): user pid=10670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171403401.768:63947): login pid=10670 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171403401.770:63948): user pid=10671 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171403401.771:63949): login pid=10671 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171403401.771:63950): user pid=10670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171403401.771:63951): user pid=10670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171403401.778:63952): user pid=10671 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171403401.778:63953): user pid=10671 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171403401.803:63954): user pid=10670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171403401.803:63955): user pid=10670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171403548.705:63956): avc: denied { search } for pid=10705 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171403548.705:63956): avc: denied { write } for pid=10705 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171403548.705:63956): avc: denied { add_name } for pid=10705 comm="pyzor" name="KAeNjg" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171403548.705:63956): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=10705 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171403548.706:63957): avc: denied { remove_name } for pid=10705 comm="pyzor" name="KAeNjg" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171403548.706:63957): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=10705 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171403553.696:63958): avc: denied { write } for pid=10701 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171403553.696:63958): avc: denied { add_name } for pid=10701 comm="procmail" name="_NnC.hMj0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171403553.696:63958): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=10696 pid=10701 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171403553.697:63959): avc: denied { remove_name } for pid=10701 comm="procmail" name="_NnC.hMj0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171403553.697:63959): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=6207c0 a2=7fffbad4c660 a3=61b650 items=0 ppid=10696 pid=10701 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171403701.106:63960): user pid=10718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171403701.107:63961): login pid=10718 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171403701.110:63962): user pid=10718 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171403701.110:63963): user pid=10718 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171404001.438:63964): user pid=10756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171404001.439:63965): login pid=10756 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171404001.439:63966): user pid=10755 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171404001.439:63967): login pid=10755 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171404001.444:63968): user pid=10756 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171404001.444:63969): user pid=10756 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171404001.450:63970): user pid=10755 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171404001.450:63971): user pid=10755 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171404001.471:63972): user pid=10755 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171404001.471:63973): user pid=10755 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171404021.646:63974): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171404021.646:63974): arch=c000003e syscall=2 success=yes exit=12 a0=32da620 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171404021.647:63975): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171404021.647:63975): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171404021.647:63975): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171404021.652:63976): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171404021.652:63976): arch=c000003e syscall=2 success=yes exit=9 a0=329bdd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171404022.910:63977): avc: denied { getattr } for pid=10779 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171404022.910:63977): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff182634e0 a2=7fff182634e0 a3=6c6280 items=0 ppid=29238 pid=10779 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171404022.910:63977): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171404022.910:63978): avc: denied { read } for pid=10779 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171404022.910:63978): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=10779 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171404023.762:63979): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171404023.762:63979): arch=c000003e syscall=86 success=yes exit=0 a0=333bf30 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171404023.762:63980): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171404023.762:63980): arch=c000003e syscall=87 success=yes exit=0 a0=333bf30 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171404023.763:63981): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171404023.763:63981): arch=c000003e syscall=2 success=yes exit=9 a0=35ecd50 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171404023.883:63982): avc: denied { create } for pid=10775 comm="procmail" name="_XoC.3Tj0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171404023.883:63982): arch=c000003e syscall=2 success=yes exit=6 a0=61c770 a1=c1 a2=124 a3=61c770 items=0 ppid=10770 pid=10775 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171404023.883:63983): avc: denied { write } for pid=10775 comm="procmail" name="_XoC.3Tj0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171404023.883:63983): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c770 items=0 ppid=10770 pid=10775 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171404023.883:63983): path="/home/dhighley/_XoC.3Tj0FB.douglas" >type=AVC msg=audit(1171404023.884:63984): avc: denied { getattr } for pid=10775 comm="procmail" name="_XoC.3Tj0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171404023.884:63984): arch=c000003e syscall=4 success=yes exit=0 a0=61c770 a1=7fff65e81880 a2=7fff65e81880 a3=61c770 items=0 ppid=10770 pid=10775 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171404023.884:63984): path="/home/dhighley/_XoC.3Tj0FB.douglas" >type=AVC msg=audit(1171404023.884:63985): avc: denied { link } for pid=10775 comm="procmail" name="_XoC.3Tj0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171404023.884:63985): arch=c000003e syscall=86 success=yes exit=0 a0=61c770 a1=61b520 a2=7fff65e817a0 a3=61c770 items=0 ppid=10770 pid=10775 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171404023.884:63986): avc: denied { unlink } for pid=10775 comm="procmail" name="_XoC.3Tj0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171404023.884:63986): arch=c000003e syscall=87 success=yes exit=0 a0=61c770 a1=61b520 a2=7fff65e817a0 a3=61c770 items=0 ppid=10770 pid=10775 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171404061.763:63987): user pid=10799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171404061.764:63988): login pid=10799 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171404061.766:63989): user pid=10799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171404061.766:63990): user pid=10799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171404062.648:63991): user pid=10799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171404062.649:63992): user pid=10799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171404301.654:63993): user pid=10834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171404301.654:63994): login pid=10834 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171404301.657:63995): user pid=10834 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171404301.657:63996): user pid=10834 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171404601.978:63997): user pid=10872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171404601.978:63998): login pid=10872 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171404601.981:63999): user pid=10873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171404601.981:64000): login pid=10873 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171404601.984:64001): user pid=10872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171404601.984:64002): user pid=10872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171404601.986:64003): user pid=10873 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171404601.986:64004): user pid=10873 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171404602.014:64005): user pid=10872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171404602.015:64006): user pid=10872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171404681.101:64007): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171404681.101:64007): arch=c000003e syscall=62 success=yes exit=0 a0=2a96 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1171404787.654:64008): user pid=9760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171404787.654:64009): user pid=9760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171404901.660:64010): user pid=10922 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171404901.660:64011): login pid=10922 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171404901.664:64012): user pid=10922 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171404901.664:64013): user pid=10922 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171405029.413:64014): avc: denied { search } for pid=10954 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171405029.413:64014): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=10954 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171405029.414:64015): avc: denied { create } for pid=10954 comm="pyzor" name="q2kHij" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171405029.414:64015): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=10954 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171405029.414:64016): avc: denied { getattr } for pid=10954 comm="pyzor" name="q2kHij" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171405029.414:64016): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffc4091bb0 a2=7fffc4091bb0 a3=3 items=0 ppid=29238 pid=10954 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171405029.414:64016): path="/tmp/q2kHij" >type=AVC msg=audit(1171405029.414:64017): avc: denied { write } for pid=10954 comm="pyzor" name="q2kHij" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171405029.414:64017): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=29238 pid=10954 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171405029.414:64017): path="/tmp/q2kHij" >type=AVC msg=audit(1171405029.415:64018): avc: denied { unlink } for pid=10954 comm="pyzor" name="q2kHij" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171405029.415:64018): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=10954 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171405029.415:64019): avc: denied { read } for pid=10954 comm="pyzor" name="tmpXKzcOc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171405029.415:64019): arch=c000003e syscall=0 success=yes exit=2020 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=10954 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171405029.415:64019): path=2F746D702F746D70584B7A634F63202864656C6574656429 >type=AVC msg=audit(1171405034.411:64020): avc: denied { append } for pid=10950 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171405034.411:64020): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=10945 pid=10950 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171405201.990:64021): user pid=10968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171405201.991:64022): login pid=10968 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171405201.993:64023): user pid=10969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171405201.993:64024): login pid=10969 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171405201.996:64025): user pid=10968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171405201.996:64026): user pid=10968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171405201.998:64027): user pid=10969 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171405201.998:64028): user pid=10969 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171405202.021:64029): user pid=10968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171405202.021:64030): user pid=10968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171405501.328:64031): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171405501.328:64032): login pid=11012 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171405501.331:64033): user pid=11012 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171405501.331:64034): user pid=11012 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171405801.655:64035): user pid=11046 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171405801.656:64036): login pid=11046 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171405801.658:64037): user pid=11047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171405801.658:64038): login pid=11047 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171405801.660:64039): user pid=11046 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171405801.660:64040): user pid=11046 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171405801.669:64041): user pid=11047 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171405801.669:64042): user pid=11047 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171405801.679:64043): user pid=11046 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171405801.680:64044): user pid=11046 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171406101.003:64045): user pid=11082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171406101.003:64046): login pid=11082 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171406101.007:64047): user pid=11082 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171406101.007:64048): user pid=11082 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171406401.325:64049): user pid=11116 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171406401.325:64050): login pid=11116 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171406401.327:64051): user pid=11117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171406401.328:64052): login pid=11117 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171406401.329:64053): user pid=11116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171406401.329:64054): user pid=11116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171406401.333:64055): user pid=11117 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171406401.333:64056): user pid=11117 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171406401.352:64057): user pid=11116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171406401.352:64058): user pid=11116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171406701.658:64059): user pid=11152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171406701.658:64060): login pid=11152 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171406701.662:64061): user pid=11152 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171406701.662:64062): user pid=11152 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171407001.995:64063): user pid=11186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171407001.995:64064): login pid=11186 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171407001.995:64065): user pid=11187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171407001.996:64066): login pid=11187 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171407002.000:64067): user pid=11186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171407002.000:64068): user pid=11186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171407002.003:64069): user pid=11187 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171407002.003:64070): user pid=11187 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171407002.023:64071): user pid=11186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171407002.023:64072): user pid=11186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171407301.337:64073): user pid=11223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171407301.337:64074): login pid=11223 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171407301.341:64075): user pid=11223 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171407301.341:64076): user pid=11223 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171407601.665:64077): user pid=11256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171407601.665:64078): login pid=11256 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171407601.665:64079): user pid=11257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171407601.665:64080): login pid=11257 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171407601.668:64081): user pid=11258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171407601.668:64082): login pid=11258 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171407601.670:64083): user pid=11256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171407601.670:64084): user pid=11256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171407601.673:64085): user pid=11257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171407601.673:64086): user pid=11257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171407601.680:64087): user pid=11258 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171407601.680:64088): user pid=11258 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171407601.705:64089): user pid=11256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171407601.705:64090): user pid=11256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171407661.997:64091): user pid=11278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171407661.997:64092): login pid=11278 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171407662.001:64093): user pid=11278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171407662.001:64094): user pid=11278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171407662.884:64095): user pid=11278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171407662.884:64096): user pid=11278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171407901.893:64097): user pid=11313 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171407901.894:64098): login pid=11313 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171407901.897:64099): user pid=11313 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171407901.897:64100): user pid=11313 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171407941.495:64101): avc: denied { getattr } for pid=11337 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171407941.495:64101): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffffb5c3570 a2=7ffffb5c3570 a3=6c6280 items=0 ppid=29238 pid=11337 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171407941.495:64101): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171407941.495:64102): avc: denied { read } for pid=11337 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171407941.495:64102): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=11337 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171407941.496:64103): avc: denied { search } for pid=11337 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171407941.496:64103): avc: denied { write } for pid=11337 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171407941.496:64103): avc: denied { add_name } for pid=11337 comm="pyzor" name="H9yOMu" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171407941.496:64103): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=11337 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171407941.497:64104): avc: denied { remove_name } for pid=11337 comm="pyzor" name="H9yOMu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171407941.497:64104): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=11337 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171407942.982:64105): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171407942.982:64105): arch=c000003e syscall=2 success=yes exit=9 a0=34a6300 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171407942.999:64106): avc: denied { write } for pid=11333 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171407942.999:64106): avc: denied { add_name } for pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171407942.999:64106): avc: denied { create } for pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171407942.999:64106): arch=c000003e syscall=2 success=yes exit=6 a0=61b5c0 a1=c1 a2=124 a3=61b5c0 items=0 ppid=11328 pid=11333 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171407942.999:64107): avc: denied { write } for pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171407942.999:64107): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b5c0 items=0 ppid=11328 pid=11333 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171407942.999:64107): path="/home/dhighley/_FxC.GRk0FB.douglas" >type=AVC msg=audit(1171407942.999:64108): avc: denied { getattr } for pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171407942.999:64108): arch=c000003e syscall=4 success=yes exit=0 a0=61b5c0 a1=7fffb283b230 a2=7fffb283b230 a3=61b5c0 items=0 ppid=11328 pid=11333 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171407942.999:64108): path="/home/dhighley/_FxC.GRk0FB.douglas" >type=AVC msg=audit(1171407942.999:64109): avc: denied { link } for pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171407942.999:64109): arch=c000003e syscall=86 success=yes exit=0 a0=61b5c0 a1=61b520 a2=7fffb283b150 a3=61b5c0 items=0 ppid=11328 pid=11333 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171407943.000:64110): avc: denied { remove_name } for pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171407943.000:64110): avc: denied { unlink } for pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171407943.000:64110): arch=c000003e syscall=87 success=yes exit=0 a0=61b5c0 a1=61b520 a2=7fffb283b150 a3=61b5c0 items=0 ppid=11328 pid=11333 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171407964.599:64111): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171407964.599:64111): arch=c000003e syscall=2 success=yes exit=12 a0=33e3100 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171407964.599:64112): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171407964.599:64112): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171407964.599:64112): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171407964.607:64113): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171407964.607:64113): arch=c000003e syscall=2 success=yes exit=9 a0=330f0e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171407970.050:64114): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171407970.050:64114): arch=c000003e syscall=62 success=yes exit=0 a0=2c55 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171407970.642:64115): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171407970.642:64115): arch=c000003e syscall=86 success=yes exit=0 a0=375c890 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171407970.642:64116): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171407970.642:64116): arch=c000003e syscall=87 success=yes exit=0 a0=375c890 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171408201.223:64117): user pid=11369 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171408201.223:64118): login pid=11369 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171408201.225:64119): user pid=11368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171408201.225:64120): login pid=11368 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171408201.230:64121): user pid=11369 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171408201.230:64122): user pid=11369 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171408201.234:64123): user pid=11368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171408201.234:64124): user pid=11368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171408201.256:64125): user pid=11368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171408201.256:64126): user pid=11368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171408501.552:64127): user pid=11407 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171408501.552:64128): login pid=11407 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171408501.556:64129): user pid=11407 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171408501.556:64130): user pid=11407 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171408801.882:64131): user pid=11441 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171408801.882:64132): login pid=11441 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171408801.885:64133): user pid=11442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171408801.885:64134): login pid=11442 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171408801.885:64135): user pid=11441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171408801.885:64136): user pid=11441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171408801.892:64137): user pid=11442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171408801.892:64138): user pid=11442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171408801.906:64139): user pid=11441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171408801.906:64140): user pid=11441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171409101.221:64141): user pid=11480 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171409101.221:64142): login pid=11480 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171409101.225:64143): user pid=11480 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171409101.225:64144): user pid=11480 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171409401.550:64145): user pid=11524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171409401.550:64146): user pid=11525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171409401.550:64147): login pid=11524 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171409401.550:64148): login pid=11525 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171409401.555:64149): user pid=11524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171409401.555:64150): user pid=11524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171409401.556:64151): user pid=11525 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171409401.556:64152): user pid=11525 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171409401.577:64153): user pid=11524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171409401.577:64154): user pid=11524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171409701.883:64155): user pid=11562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171409701.883:64156): login pid=11562 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171409701.886:64157): user pid=11562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171409701.886:64158): user pid=11562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171410001.223:64159): user pid=11595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171410001.224:64160): login pid=11595 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171410001.226:64161): user pid=11596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171410001.226:64162): user pid=11595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171410001.226:64163): login pid=11596 uid=0 old auid=4294967295 new auid=111 >type=CRED_ACQ msg=audit(1171410001.227:64164): user pid=11595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171410001.239:64165): user pid=11596 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171410001.240:64166): user pid=11596 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171410001.245:64167): user pid=11595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171410001.246:64168): user pid=11595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171410301.573:64169): user pid=11632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171410301.574:64170): login pid=11632 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171410301.578:64171): user pid=11632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171410301.578:64172): user pid=11632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171410601.907:64173): user pid=11665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171410601.907:64174): login pid=11665 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171410601.909:64175): user pid=11666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171410601.910:64176): login pid=11666 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171410601.913:64177): user pid=11665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171410601.913:64178): user pid=11665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171410601.916:64179): user pid=11666 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171410601.916:64180): user pid=11666 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171410601.933:64181): user pid=11665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171410601.933:64182): user pid=11665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171410901.247:64183): user pid=11701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171410901.247:64184): login pid=11701 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171410901.251:64185): user pid=11701 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171410901.251:64186): user pid=11701 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171411201.573:64187): user pid=11740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171411201.573:64188): login pid=11740 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171411201.573:64189): user pid=11741 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171411201.574:64190): login pid=11741 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171411201.578:64191): user pid=11740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171411201.578:64192): user pid=11740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171411201.579:64193): user pid=11741 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171411201.584:64194): user pid=11741 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171411201.597:64195): user pid=11740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171411201.597:64196): user pid=11740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171411261.906:64197): user pid=11758 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171411261.906:64198): login pid=11758 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171411261.909:64199): user pid=11758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171411261.909:64200): user pid=11758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171411262.791:64201): user pid=11758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171411262.791:64202): user pid=11758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171411501.797:64203): user pid=11794 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171411501.797:64204): login pid=11794 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171411501.800:64205): user pid=11794 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171411501.800:64206): user pid=11794 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171411801.122:64207): user pid=11855 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171411801.122:64208): login pid=11855 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171411801.127:64209): user pid=11856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171411801.127:64210): login pid=11856 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171411801.129:64211): user pid=11855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171411801.129:64212): user pid=11855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171411801.131:64213): user pid=11856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171411801.131:64214): user pid=11856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171411801.403:64215): user pid=11855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171411801.404:64216): user pid=11855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171412101.664:64217): user pid=11896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171412101.665:64218): login pid=11896 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171412101.669:64219): user pid=11896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171412101.669:64220): user pid=11896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171412401.990:64221): user pid=11928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171412401.990:64222): login pid=11928 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171412401.992:64223): user pid=11929 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171412401.992:64224): login pid=11929 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171412401.994:64225): user pid=11928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171412401.994:64226): user pid=11928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171412401.999:64227): user pid=11929 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171412401.999:64228): user pid=11929 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171412402.011:64229): user pid=11928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171412402.012:64230): user pid=11928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171412701.321:64231): user pid=11964 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171412701.321:64232): login pid=11964 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171412701.324:64233): user pid=11964 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171412701.324:64234): user pid=11964 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171412714.280:64235): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171412714.280:64235): arch=c000003e syscall=2 success=yes exit=12 a0=32f5520 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171412714.281:64236): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171412714.281:64236): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171412714.281:64236): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171412714.288:64237): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171412714.288:64237): arch=c000003e syscall=2 success=yes exit=9 a0=3498d50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171412714.876:64238): avc: denied { search } for pid=11985 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171412714.876:64238): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171412714.876:64239): avc: denied { getattr } for pid=11985 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171412714.876:64239): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9b1b4bb0 a2=7fff9b1b4bb0 a3=6c6280 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171412714.876:64239): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171412714.876:64240): avc: denied { read } for pid=11985 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171412714.876:64240): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171412714.877:64241): avc: denied { search } for pid=11985 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171412714.877:64241): avc: denied { write } for pid=11985 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171412714.877:64241): avc: denied { add_name } for pid=11985 comm="pyzor" name="2P8BX4" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171412714.877:64241): avc: denied { create } for pid=11985 comm="pyzor" name="2P8BX4" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171412714.877:64241): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171412714.878:64242): avc: denied { getattr } for pid=11985 comm="pyzor" name="2P8BX4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171412714.878:64242): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff9b1b30a0 a2=7fff9b1b30a0 a3=3 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171412714.878:64242): path="/tmp/2P8BX4" >type=AVC msg=audit(1171412714.878:64243): avc: denied { write } for pid=11985 comm="pyzor" name="2P8BX4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171412714.878:64243): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171412714.878:64243): path="/tmp/2P8BX4" >type=AVC msg=audit(1171412714.878:64244): avc: denied { remove_name } for pid=11985 comm="pyzor" name="2P8BX4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171412714.878:64244): avc: denied { unlink } for pid=11985 comm="pyzor" name="2P8BX4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171412714.878:64244): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171412714.880:64245): avc: denied { read } for pid=11985 comm="pyzor" name="tmpq4a0QS" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171412714.880:64245): arch=c000003e syscall=0 success=yes exit=1092 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171412714.880:64245): path=2F746D702F746D70713461305153202864656C6574656429 >type=AVC msg=audit(1171412719.837:64246): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171412719.837:64246): arch=c000003e syscall=62 success=yes exit=0 a0=2ed1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171412719.905:64247): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171412719.905:64247): arch=c000003e syscall=86 success=yes exit=0 a0=32c7530 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171412719.905:64248): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171412719.905:64248): arch=c000003e syscall=87 success=yes exit=0 a0=32c7530 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171412719.906:64249): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171412719.906:64249): arch=c000003e syscall=2 success=yes exit=9 a0=31301b0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171412719.963:64250): avc: denied { write } for pid=11981 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171412719.963:64250): avc: denied { add_name } for pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171412719.963:64250): avc: denied { create } for pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171412719.963:64250): arch=c000003e syscall=2 success=yes exit=6 a0=61cab0 a1=c1 a2=124 a3=61cab0 items=0 ppid=11976 pid=11981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171412719.964:64251): avc: denied { write } for pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171412719.964:64251): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cab0 items=0 ppid=11976 pid=11981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171412719.964:64251): path="/home/dhighley/_N7C.vbl0FB.douglas" >type=AVC msg=audit(1171412719.964:64252): avc: denied { getattr } for pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171412719.964:64252): arch=c000003e syscall=4 success=yes exit=0 a0=61cab0 a1=7fff6e79d1a0 a2=7fff6e79d1a0 a3=61cab0 items=0 ppid=11976 pid=11981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171412719.964:64252): path="/home/dhighley/_N7C.vbl0FB.douglas" >type=AVC msg=audit(1171412719.964:64253): avc: denied { link } for pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171412719.964:64253): arch=c000003e syscall=86 success=yes exit=0 a0=61cab0 a1=61b510 a2=7fff6e79d0c0 a3=61cab0 items=0 ppid=11976 pid=11981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171412719.964:64254): avc: denied { remove_name } for pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171412719.964:64254): avc: denied { unlink } for pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171412719.964:64254): arch=c000003e syscall=87 success=yes exit=0 a0=61cab0 a1=61b510 a2=7fff6e79d0c0 a3=61cab0 items=0 ppid=11976 pid=11981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171412719.964:64255): avc: denied { append } for pid=11981 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171412719.964:64255): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=11976 pid=11981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171413001.653:64256): user pid=12009 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171413001.653:64257): login pid=12009 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171413001.655:64258): user pid=12010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171413001.656:64259): login pid=12010 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171413001.657:64260): user pid=12009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171413001.658:64261): user pid=12009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171413001.662:64262): user pid=12010 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171413001.662:64263): user pid=12010 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171413001.683:64264): user pid=12009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171413001.683:64265): user pid=12009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171413301.988:64266): user pid=12048 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171413301.988:64267): login pid=12048 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171413301.992:64268): user pid=12048 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171413301.992:64269): user pid=12048 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171413420.426:64270): avc: denied { search } for pid=12083 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171413420.426:64270): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=12083 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171413601.331:64271): user pid=12100 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171413601.331:64272): login pid=12100 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171413601.333:64273): user pid=12101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171413601.333:64274): login pid=12101 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171413601.334:64275): user pid=12100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171413601.334:64276): user pid=12100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171413601.348:64277): user pid=12101 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171413601.348:64278): user pid=12101 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171413601.354:64279): user pid=12100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171413601.354:64280): user pid=12100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171413901.680:64281): user pid=12139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171413901.680:64282): login pid=12139 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171413901.683:64283): user pid=12139 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171413901.683:64284): user pid=12139 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171414201.002:64285): user pid=12173 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171414201.003:64286): login pid=12173 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171414201.005:64287): user pid=12174 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171414201.005:64288): login pid=12174 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171414201.008:64289): user pid=12173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171414201.008:64290): user pid=12173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171414201.010:64291): user pid=12174 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171414201.010:64292): user pid=12174 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171414201.038:64293): user pid=12173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171414201.039:64294): user pid=12173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171414501.350:64295): user pid=12209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171414501.350:64296): login pid=12209 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171414501.354:64297): user pid=12209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171414501.354:64298): user pid=12209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171414591.440:64299): avc: denied { setattr } for pid=29238 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171414591.440:64299): arch=c000003e syscall=132 success=yes exit=0 a0=31ab3a0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171414591.440:64300): avc: denied { rename } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171414591.440:64300): arch=c000003e syscall=82 success=yes exit=0 a0=361e830 a1=3103ab0 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171414592.609:64301): avc: denied { search } for pid=12235 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171414592.609:64301): avc: denied { write } for pid=12235 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171414592.609:64301): avc: denied { add_name } for pid=12235 comm="pyzor" name="dsalnW" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171414592.609:64301): avc: denied { create } for pid=12235 comm="pyzor" name="dsalnW" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171414592.609:64301): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=12235 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171414592.609:64302): avc: denied { getattr } for pid=12235 comm="pyzor" name="dsalnW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171414592.609:64302): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe5746be0 a2=7fffe5746be0 a3=3 items=0 ppid=29238 pid=12235 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171414592.609:64302): path="/tmp/dsalnW" >type=AVC msg=audit(1171414592.610:64303): avc: denied { write } for pid=12235 comm="pyzor" name="dsalnW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171414592.610:64303): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=29238 pid=12235 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171414592.610:64303): path="/tmp/dsalnW" >type=AVC msg=audit(1171414592.610:64304): avc: denied { remove_name } for pid=12235 comm="pyzor" name="dsalnW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171414592.610:64304): avc: denied { unlink } for pid=12235 comm="pyzor" name="dsalnW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171414592.610:64304): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=12235 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171414592.611:64305): avc: denied { read } for pid=12235 comm="pyzor" name="tmpvvWtk4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171414592.611:64305): arch=c000003e syscall=0 success=yes exit=527 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=12235 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171414592.611:64305): path=2F746D702F746D70767657746B34202864656C6574656429 >type=AVC msg=audit(1171414597.827:64306): avc: denied { write } for pid=12231 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171414597.827:64306): avc: denied { add_name } for pid=12231 comm="procmail" name="_H_C.F5l0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171414597.827:64306): arch=c000003e syscall=2 success=yes exit=6 a0=61c820 a1=c1 a2=124 a3=61c820 items=0 ppid=12226 pid=12231 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171414597.827:64307): avc: denied { remove_name } for pid=12231 comm="procmail" name="_H_C.F5l0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171414597.827:64307): arch=c000003e syscall=87 success=yes exit=0 a0=61c820 a1=61b520 a2=7fff6290f220 a3=61c820 items=0 ppid=12226 pid=12231 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171414597.827:64308): avc: denied { append } for pid=12231 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171414597.827:64308): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=12226 pid=12231 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171414801.675:64309): user pid=12258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171414801.676:64310): login pid=12258 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171414801.678:64311): user pid=12259 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171414801.678:64312): login pid=12259 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171414801.682:64313): user pid=12258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171414801.682:64314): user pid=12258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171414801.685:64315): user pid=12259 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171414801.685:64316): user pid=12259 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171414801.705:64317): user pid=12258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171414801.705:64318): user pid=12258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171414861.021:64319): user pid=12274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171414861.021:64320): login pid=12274 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171414861.024:64321): user pid=12274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171414861.024:64322): user pid=12274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171414861.942:64323): user pid=12274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171414861.942:64324): user pid=12274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171415101.949:64325): user pid=12314 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171415101.949:64326): login pid=12314 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171415101.953:64327): user pid=12314 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171415101.953:64328): user pid=12314 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171415401.288:64329): user pid=12351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171415401.289:64330): login pid=12351 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171415401.290:64331): user pid=12352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171415401.290:64332): login pid=12352 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171415401.295:64333): user pid=12351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171415401.295:64334): user pid=12351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171415401.299:64335): user pid=12352 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171415401.299:64336): user pid=12352 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171415401.315:64337): user pid=12351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171415401.316:64338): user pid=12351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171415512.751:64339): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171415512.751:64339): arch=c000003e syscall=2 success=yes exit=12 a0=32de7c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171415512.752:64340): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171415512.752:64340): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171415512.752:64340): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171415512.759:64341): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171415512.759:64341): arch=c000003e syscall=2 success=yes exit=9 a0=33e1b70 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171415513.525:64342): avc: denied { getattr } for pid=12381 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171415513.525:64342): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff164c9470 a2=7fff164c9470 a3=6c6280 items=0 ppid=29238 pid=12381 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171415513.525:64342): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171415513.526:64343): avc: denied { read } for pid=12381 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171415513.526:64343): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=12381 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171415518.486:64344): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171415518.486:64344): arch=c000003e syscall=62 success=yes exit=0 a0=305d a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171415518.679:64345): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171415518.679:64345): arch=c000003e syscall=86 success=yes exit=0 a0=36eb6d0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171415518.680:64346): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171415518.680:64346): arch=c000003e syscall=87 success=yes exit=0 a0=36eb6d0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171415518.680:64347): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171415518.680:64347): arch=c000003e syscall=2 success=yes exit=9 a0=60b700 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171415518.742:64348): avc: denied { create } for pid=12377 comm="procmail" name="_ZBD.eHm0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171415518.742:64348): arch=c000003e syscall=2 success=yes exit=6 a0=61cb20 a1=c1 a2=124 a3=61cb20 items=0 ppid=12372 pid=12377 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171415518.742:64349): avc: denied { write } for pid=12377 comm="procmail" name="_ZBD.eHm0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171415518.742:64349): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cb20 items=0 ppid=12372 pid=12377 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171415518.742:64349): path="/home/dhighley/_ZBD.eHm0FB.douglas" >type=AVC msg=audit(1171415518.742:64350): avc: denied { getattr } for pid=12377 comm="procmail" name="_ZBD.eHm0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171415518.742:64350): arch=c000003e syscall=4 success=yes exit=0 a0=61cb20 a1=7fff82b83580 a2=7fff82b83580 a3=61cb20 items=0 ppid=12372 pid=12377 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171415518.742:64350): path="/home/dhighley/_ZBD.eHm0FB.douglas" >type=AVC msg=audit(1171415518.742:64351): avc: denied { link } for pid=12377 comm="procmail" name="_ZBD.eHm0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171415518.742:64351): arch=c000003e syscall=86 success=yes exit=0 a0=61cb20 a1=61b520 a2=7fff82b834a0 a3=61cb20 items=0 ppid=12372 pid=12377 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171415518.742:64352): avc: denied { unlink } for pid=12377 comm="procmail" name="_ZBD.eHm0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171415518.742:64352): arch=c000003e syscall=87 success=yes exit=0 a0=61cb20 a1=61b520 a2=7fff82b834a0 a3=61cb20 items=0 ppid=12372 pid=12377 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1171415587.803:64353): user pid=11257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171415587.803:64354): user pid=11257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171415701.810:64355): user pid=12400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171415701.810:64356): login pid=12400 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171415701.814:64357): user pid=12400 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171415701.814:64358): user pid=12400 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171416001.144:64359): user pid=12437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171416001.144:64360): login pid=12437 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171416001.146:64361): user pid=12438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171416001.146:64362): login pid=12438 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171416001.148:64363): user pid=12437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171416001.148:64364): user pid=12437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171416001.151:64365): user pid=12438 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171416001.152:64366): user pid=12438 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171416001.167:64367): user pid=12437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171416001.168:64368): user pid=12437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171416111.702:64369): avc: denied { search } for pid=12478 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171416111.702:64369): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=12478 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171416111.702:64370): avc: denied { getattr } for pid=12478 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171416111.702:64370): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff4250f4b0 a2=7fff4250f4b0 a3=6c6280 items=0 ppid=29238 pid=12478 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171416111.702:64370): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171416111.702:64371): avc: denied { read } for pid=12478 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171416111.702:64371): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=12478 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171416116.787:64372): avc: denied { append } for pid=12474 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171416116.787:64372): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=12469 pid=12474 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171416116.787:64373): avc: denied { lock } for pid=12474 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171416116.787:64373): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=12469 pid=12474 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171416116.787:64373): path="/home/phighley/spamlog" >type=USER_ACCT msg=audit(1171416301.491:64374): user pid=12497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171416301.491:64375): login pid=12497 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171416301.496:64376): user pid=12497 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171416301.496:64377): user pid=12497 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171416601.821:64378): user pid=12535 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171416601.821:64379): login pid=12535 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171416601.823:64380): user pid=12536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171416601.823:64381): login pid=12536 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171416601.827:64382): user pid=12535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171416601.827:64383): user pid=12535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171416601.829:64384): user pid=12536 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171416601.829:64385): user pid=12536 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171416601.856:64386): user pid=12535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171416601.856:64387): user pid=12535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171416901.167:64388): user pid=12570 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171416901.167:64389): login pid=12570 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171416901.170:64390): user pid=12570 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171416901.170:64391): user pid=12570 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171417013.625:64392): avc: denied { search } for pid=12599 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171417013.625:64392): avc: denied { write } for pid=12599 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171417013.625:64392): avc: denied { add_name } for pid=12599 comm="pyzor" name="E7hRgl" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171417013.625:64392): avc: denied { create } for pid=12599 comm="pyzor" name="E7hRgl" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171417013.625:64392): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=12599 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171417013.626:64393): avc: denied { getattr } for pid=12599 comm="pyzor" name="E7hRgl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171417013.626:64393): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff551605f0 a2=7fff551605f0 a3=3 items=0 ppid=29238 pid=12599 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171417013.626:64393): path="/tmp/E7hRgl" >type=AVC msg=audit(1171417013.626:64394): avc: denied { write } for pid=12599 comm="pyzor" name="E7hRgl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171417013.626:64394): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=29238 pid=12599 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171417013.626:64394): path="/tmp/E7hRgl" >type=AVC msg=audit(1171417013.626:64395): avc: denied { remove_name } for pid=12599 comm="pyzor" name="E7hRgl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171417013.626:64395): avc: denied { unlink } for pid=12599 comm="pyzor" name="E7hRgl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171417013.626:64395): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=12599 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171417013.628:64396): avc: denied { read } for pid=12599 comm="pyzor" name="tmpgLy6fP" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171417013.628:64396): arch=c000003e syscall=0 success=yes exit=1090 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=12599 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171417013.628:64396): path=2F746D702F746D70674C79366650202864656C6574656429 >type=AVC msg=audit(1171417018.909:64397): avc: denied { write } for pid=12595 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171417018.909:64397): avc: denied { add_name } for pid=12595 comm="procmail" name="_zED.6em0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171417018.909:64397): arch=c000003e syscall=2 success=yes exit=6 a0=61cac0 a1=c1 a2=124 a3=61cac0 items=0 ppid=12590 pid=12595 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171417018.910:64398): avc: denied { remove_name } for pid=12595 comm="procmail" name="_zED.6em0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171417018.910:64398): arch=c000003e syscall=87 success=yes exit=0 a0=61cac0 a1=61b520 a2=7fff57eb87d0 a3=61cac0 items=0 ppid=12590 pid=12595 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171417018.910:64399): avc: denied { append } for pid=12595 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171417018.910:64399): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=12590 pid=12595 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171417201.495:64400): user pid=12615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171417201.496:64401): login pid=12615 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171417201.498:64402): user pid=12616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171417201.499:64403): login pid=12616 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171417201.501:64404): user pid=12615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171417201.501:64405): user pid=12615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171417201.510:64406): user pid=12616 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171417201.511:64407): user pid=12616 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171417201.524:64408): user pid=12615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171417201.525:64409): user pid=12615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171417501.830:64410): user pid=12655 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171417501.830:64411): login pid=12655 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171417501.833:64412): user pid=12655 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171417501.833:64413): user pid=12655 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171417801.164:64414): user pid=12689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171417801.165:64415): login pid=12689 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171417801.166:64416): user pid=12690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171417801.167:64417): login pid=12690 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171417801.169:64418): user pid=12689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171417801.169:64419): user pid=12689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171417801.170:64420): user pid=12690 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171417801.173:64421): user pid=12690 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171417801.188:64422): user pid=12689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171417801.188:64423): user pid=12689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171418101.495:64424): user pid=12727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171418101.495:64425): login pid=12727 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171418101.500:64426): user pid=12727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171418101.500:64427): user pid=12727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171418401.820:64428): user pid=12761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171418401.820:64429): login pid=12761 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171418401.822:64430): user pid=12762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171418401.822:64431): login pid=12762 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171418401.824:64432): user pid=12763 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171418401.825:64433): user pid=12761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171418401.825:64434): user pid=12761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171418401.825:64435): login pid=12763 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171418401.836:64436): user pid=12763 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171418401.836:64437): user pid=12763 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171418401.840:64438): user pid=12762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171418401.840:64439): user pid=12762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171418401.850:64440): user pid=12761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171418401.850:64441): user pid=12761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171418461.158:64442): user pid=12782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171418461.159:64443): login pid=12782 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171418461.162:64444): user pid=12782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171418461.162:64445): user pid=12782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171418462.040:64446): user pid=12782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171418462.041:64447): user pid=12782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171418701.047:64448): user pid=12819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171418701.048:64449): login pid=12819 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171418701.050:64450): user pid=12819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171418701.050:64451): user pid=12819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171418793.106:64452): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171418793.106:64452): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171418793.106:64452): path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.29238" >type=AVC msg=audit(1171418793.106:64453): avc: denied { link } for pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171418793.106:64453): arch=c000003e syscall=86 success=yes exit=0 a0=31656a0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171418793.106:64454): avc: denied { unlink } for pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171418793.106:64454): arch=c000003e syscall=87 success=yes exit=0 a0=31656a0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171418793.108:64455): avc: denied { write } for pid=29238 comm="spamd" name="bayes_seen" dev=dm-0 ino=15630939 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171418793.108:64455): arch=c000003e syscall=2 success=yes exit=9 a0=31fadb0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171418793.109:64456): avc: denied { setattr } for pid=29238 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171418793.109:64456): arch=c000003e syscall=132 success=yes exit=0 a0=31ab3a0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171418793.109:64457): avc: denied { rename } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171418793.109:64457): arch=c000003e syscall=82 success=yes exit=0 a0=361e830 a1=3103ab0 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171418799.689:64458): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171418799.689:64458): arch=c000003e syscall=1 success=yes exit=1152 a0=a a1=33ceb80 a2=480 a3=11 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171418799.689:64458): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171418799.698:64459): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171418799.698:64459): arch=c000003e syscall=2 success=yes exit=9 a0=323c940 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171418800.270:64460): avc: denied { getattr } for pid=12847 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171418800.270:64460): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffd67aece0 a2=7fffd67aece0 a3=6c6280 items=0 ppid=29238 pid=12847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171418800.270:64460): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171418800.270:64461): avc: denied { read } for pid=12847 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171418800.270:64461): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=12847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171418805.232:64462): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171418805.232:64462): arch=c000003e syscall=62 success=yes exit=0 a0=322f a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171418805.824:64463): avc: denied { create } for pid=12843 comm="procmail" name="_rID.16m0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171418805.824:64463): arch=c000003e syscall=2 success=yes exit=6 a0=61b5c0 a1=c1 a2=124 a3=61b5c0 items=0 ppid=12838 pid=12843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171418805.824:64464): avc: denied { write } for pid=12843 comm="procmail" name="_rID.16m0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171418805.824:64464): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b5c0 items=0 ppid=12838 pid=12843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171418805.824:64464): path="/home/dhighley/_rID.16m0FB.douglas" >type=AVC msg=audit(1171418805.824:64465): avc: denied { getattr } for pid=12843 comm="procmail" name="_rID.16m0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171418805.824:64465): arch=c000003e syscall=4 success=yes exit=0 a0=61b5c0 a1=7fff98827220 a2=7fff98827220 a3=61b5c0 items=0 ppid=12838 pid=12843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171418805.824:64465): path="/home/dhighley/_rID.16m0FB.douglas" >type=AVC msg=audit(1171418805.824:64466): avc: denied { link } for pid=12843 comm="procmail" name="_rID.16m0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171418805.824:64466): arch=c000003e syscall=86 success=yes exit=0 a0=61b5c0 a1=61b520 a2=7fff98827140 a3=61b5c0 items=0 ppid=12838 pid=12843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171418805.824:64467): avc: denied { unlink } for pid=12843 comm="procmail" name="_rID.16m0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171418805.824:64467): arch=c000003e syscall=87 success=yes exit=0 a0=61b5c0 a1=61b520 a2=7fff98827140 a3=61b5c0 items=0 ppid=12838 pid=12843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171419001.378:64468): user pid=12869 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171419001.378:64469): login pid=12869 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171419001.379:64470): user pid=12870 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171419001.379:64471): login pid=12870 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171419001.381:64472): user pid=12869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171419001.381:64473): user pid=12869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171419001.393:64474): user pid=12870 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171419001.393:64475): user pid=12870 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171419001.402:64476): user pid=12869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171419001.403:64477): user pid=12869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171419301.716:64478): user pid=12925 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171419301.716:64479): login pid=12925 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171419301.720:64480): user pid=12925 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171419301.720:64481): user pid=12925 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171419498.666:64482): avc: denied { create } for pid=12966 comm="pyzor" name="qAqhfl" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171419498.666:64482): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=12966 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171419498.667:64483): avc: denied { getattr } for pid=12966 comm="pyzor" name="qAqhfl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171419498.667:64483): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff8816ba10 a2=7fff8816ba10 a3=2 items=0 ppid=29238 pid=12966 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171419498.667:64483): path="/tmp/qAqhfl" >type=AVC msg=audit(1171419498.667:64484): avc: denied { write } for pid=12966 comm="pyzor" name="qAqhfl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171419498.667:64484): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=29238 pid=12966 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171419498.667:64484): path="/tmp/qAqhfl" >type=AVC msg=audit(1171419498.667:64485): avc: denied { unlink } for pid=12966 comm="pyzor" name="qAqhfl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171419498.667:64485): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=12966 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171419498.669:64486): avc: denied { read } for pid=12966 comm="pyzor" name="tmpaKI6MG" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171419498.669:64486): arch=c000003e syscall=0 success=yes exit=1854 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=29238 pid=12966 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171419498.669:64486): path=2F746D702F746D70614B49364D47202864656C6574656429 >type=AVC msg=audit(1171419505.500:64487): avc: denied { append } for pid=12962 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171419505.500:64487): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=12957 pid=12962 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171419601.055:64488): user pid=12980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171419601.055:64489): login pid=12980 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171419601.055:64490): user pid=12979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171419601.056:64491): login pid=12979 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171419601.061:64492): user pid=12980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171419601.061:64493): user pid=12980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171419601.068:64494): user pid=12979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171419601.068:64495): user pid=12979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171419601.089:64496): user pid=12979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171419601.089:64497): user pid=12979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171419901.385:64498): user pid=13017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171419901.385:64499): login pid=13017 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171419901.388:64500): user pid=13017 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171419901.388:64501): user pid=13017 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171420201.705:64502): user pid=13054 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171420201.705:64503): login pid=13054 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171420201.706:64504): user pid=13053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171420201.707:64505): login pid=13053 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171420201.711:64506): user pid=13054 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171420201.711:64507): user pid=13054 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171420201.714:64508): user pid=13053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171420201.714:64509): user pid=13053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171420201.738:64510): user pid=13053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171420201.738:64511): user pid=13053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171420501.035:64512): user pid=13090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171420501.035:64513): login pid=13090 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171420501.039:64514): user pid=13090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171420501.039:64515): user pid=13090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171420801.361:64516): user pid=13124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171420801.361:64517): login pid=13124 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171420801.363:64518): user pid=13125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171420801.364:64519): login pid=13125 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171420801.367:64520): user pid=13124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171420801.367:64521): user pid=13124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171420801.369:64522): user pid=13125 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171420801.369:64523): user pid=13125 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171420801.388:64524): user pid=13124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171420801.389:64525): user pid=13124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171421101.703:64526): user pid=13161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171421101.703:64527): login pid=13161 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171421101.706:64528): user pid=13161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171421101.706:64529): user pid=13161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171421109.906:64530): avc: denied { search } for pid=13183 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171421109.906:64530): avc: denied { write } for pid=13183 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171421109.906:64530): avc: denied { add_name } for pid=13183 comm="pyzor" name="ER1XwU" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171421109.906:64530): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=13183 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171421109.907:64531): avc: denied { remove_name } for pid=13183 comm="pyzor" name="ER1XwU" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171421109.907:64531): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=13183 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171421114.868:64532): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171421114.868:64532): arch=c000003e syscall=62 success=yes exit=0 a0=337f a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171421114.985:64533): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171421114.985:64533): arch=c000003e syscall=2 success=yes exit=9 a0=32bb800 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171421115.036:64534): avc: denied { write } for pid=13179 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171421115.036:64534): avc: denied { add_name } for pid=13179 comm="procmail" name="_7ND.7en0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171421115.036:64534): arch=c000003e syscall=2 success=yes exit=6 a0=61c7f0 a1=c1 a2=124 a3=61c7f0 items=0 ppid=13174 pid=13179 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171421115.037:64535): avc: denied { remove_name } for pid=13179 comm="procmail" name="_7ND.7en0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171421115.037:64535): arch=c000003e syscall=87 success=yes exit=0 a0=61c7f0 a1=61b520 a2=7fffeb8d21e0 a3=61c7f0 items=0 ppid=13174 pid=13179 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171421401.031:64536): user pid=13204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171421401.031:64537): login pid=13204 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171421401.033:64538): user pid=13205 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171421401.034:64539): login pid=13205 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171421401.037:64540): user pid=13204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171421401.037:64541): user pid=13204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171421401.040:64542): user pid=13205 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171421401.040:64543): user pid=13205 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171421401.057:64544): user pid=13204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171421401.057:64545): user pid=13204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171421414.632:64546): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171421414.632:64546): arch=c000003e syscall=2 success=yes exit=12 a0=33496d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171421414.633:64547): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171421414.633:64547): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171421414.633:64547): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171421414.638:64548): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171421414.638:64548): arch=c000003e syscall=2 success=yes exit=9 a0=32fe7e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171421415.207:64549): avc: denied { getattr } for pid=13227 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171421415.207:64549): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff3340eca0 a2=7fff3340eca0 a3=6c6280 items=0 ppid=29238 pid=13227 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171421415.207:64549): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171421415.207:64550): avc: denied { read } for pid=13227 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171421415.207:64550): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=13227 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171421420.236:64551): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171421420.236:64551): arch=c000003e syscall=86 success=yes exit=0 a0=315a3c0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171421420.236:64552): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171421420.236:64552): arch=c000003e syscall=87 success=yes exit=0 a0=315a3c0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171421701.368:64553): user pid=13251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171421701.368:64554): login pid=13251 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171421701.372:64555): user pid=13251 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171421701.372:64556): user pid=13251 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171422001.707:64557): user pid=13284 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171422001.707:64558): login pid=13284 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171422001.710:64559): user pid=13285 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171422001.710:64560): login pid=13285 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171422001.712:64561): user pid=13284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171422001.712:64562): user pid=13284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171422001.721:64563): user pid=13285 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171422001.721:64564): user pid=13285 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171422001.731:64565): user pid=13284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171422001.731:64566): user pid=13284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171422061.038:64567): user pid=13300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171422061.038:64568): login pid=13300 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171422061.041:64569): user pid=13300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171422061.042:64570): user pid=13300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171422061.926:64571): user pid=13300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171422061.926:64572): user pid=13300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171422301.933:64573): user pid=13336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171422301.933:64574): login pid=13336 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171422301.937:64575): user pid=13336 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171422301.937:64576): user pid=13336 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171422573.433:64577): avc: denied { create } for pid=13374 comm="procmail" name="_-QD.t1n0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171422573.433:64577): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=13369 pid=13374 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171422573.434:64578): avc: denied { write } for pid=13374 comm="procmail" name="_-QD.t1n0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171422573.434:64578): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=13369 pid=13374 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171422573.434:64578): path="/home/dhighley/_-QD.t1n0FB.douglas" >type=AVC msg=audit(1171422573.434:64579): avc: denied { getattr } for pid=13374 comm="procmail" name="_-QD.t1n0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171422573.434:64579): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7fffb9cc06b0 a2=7fffb9cc06b0 a3=61a500 items=0 ppid=13369 pid=13374 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171422573.434:64579): path="/home/dhighley/_-QD.t1n0FB.douglas" >type=AVC msg=audit(1171422573.434:64580): avc: denied { link } for pid=13374 comm="procmail" name="_-QD.t1n0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171422573.434:64580): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffb9cc05d0 a3=61a500 items=0 ppid=13369 pid=13374 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171422573.434:64581): avc: denied { unlink } for pid=13374 comm="procmail" name="_-QD.t1n0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171422573.434:64581): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffb9cc05d0 a3=61a500 items=0 ppid=13369 pid=13374 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171422601.260:64582): user pid=13382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171422601.260:64583): login pid=13382 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171422601.262:64584): user pid=13383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171422601.262:64585): login pid=13383 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171422601.264:64586): user pid=13382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171422601.264:64587): user pid=13382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171422601.276:64588): user pid=13383 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171422601.276:64589): user pid=13383 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171422601.284:64590): user pid=13382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171422601.284:64591): user pid=13382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171422901.608:64592): user pid=13420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171422901.609:64593): login pid=13420 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171422901.613:64594): user pid=13420 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171422901.613:64595): user pid=13420 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171423201.933:64596): user pid=13455 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171423201.933:64597): login pid=13455 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171423201.935:64598): user pid=13456 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171423201.935:64599): login pid=13456 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171423201.939:64600): user pid=13455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171423201.939:64601): user pid=13455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171423201.941:64602): user pid=13456 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171423201.941:64603): user pid=13456 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171423201.967:64604): user pid=13455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171423201.967:64605): user pid=13455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171423501.271:64606): user pid=13490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171423501.271:64607): login pid=13490 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171423501.274:64608): user pid=13490 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171423501.274:64609): user pid=13490 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171423801.593:64610): user pid=13524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171423801.593:64611): login pid=13524 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171423801.595:64612): user pid=13525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171423801.595:64613): login pid=13525 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171423801.599:64614): user pid=13524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171423801.599:64615): user pid=13524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171423801.604:64616): user pid=13525 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171423801.604:64617): user pid=13525 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171423801.622:64618): user pid=13524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171423801.623:64619): user pid=13524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171424101.935:64620): user pid=13561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171424101.936:64621): login pid=13561 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171424101.939:64622): user pid=13561 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171424101.939:64623): user pid=13561 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171424401.267:64624): user pid=13600 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171424401.268:64625): login pid=13600 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171424401.269:64626): user pid=13599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171424401.269:64627): login pid=13599 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171424401.273:64628): user pid=13600 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171424401.273:64629): user pid=13600 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171424401.278:64630): user pid=13599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171424401.278:64631): user pid=13599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171424401.297:64632): user pid=13599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171424401.298:64633): user pid=13599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171424692.541:64634): avc: denied { search } for pid=13646 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171424692.541:64634): avc: denied { write } for pid=13646 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171424692.541:64634): avc: denied { add_name } for pid=13646 comm="pyzor" name="Q7CnE_" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171424692.541:64634): avc: denied { create } for pid=13646 comm="pyzor" name="Q7CnE_" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171424692.541:64634): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=13646 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171424692.542:64635): avc: denied { getattr } for pid=13646 comm="pyzor" name="Q7CnE_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171424692.542:64635): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff67423cd0 a2=7fff67423cd0 a3=2 items=0 ppid=29238 pid=13646 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171424692.542:64635): path="/tmp/Q7CnE_" >type=AVC msg=audit(1171424692.542:64636): avc: denied { write } for pid=13646 comm="pyzor" name="Q7CnE_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171424692.542:64636): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=29238 pid=13646 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171424692.542:64636): path="/tmp/Q7CnE_" >type=AVC msg=audit(1171424692.542:64637): avc: denied { remove_name } for pid=13646 comm="pyzor" name="Q7CnE_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171424692.542:64637): avc: denied { unlink } for pid=13646 comm="pyzor" name="Q7CnE_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171424692.542:64637): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=13646 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171424692.548:64638): avc: denied { read } for pid=13646 comm="pyzor" name="tmpNUKSat" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171424692.548:64638): arch=c000003e syscall=0 success=yes exit=2478 a0=4 a1=2aaaaf34d000 a2=1000 a3=1f5 items=0 ppid=29238 pid=13646 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171424692.548:64638): path=2F746D702F746D704E554B536174202864656C6574656429 >type=USER_ACCT msg=audit(1171424701.610:64639): user pid=13647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171424701.610:64640): login pid=13647 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171424701.614:64641): user pid=13647 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171424701.614:64642): user pid=13647 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171425001.942:64643): user pid=13688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171425001.943:64644): login pid=13688 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171425001.945:64645): user pid=13689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171425001.945:64646): login pid=13689 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171425001.947:64647): user pid=13688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171425001.947:64648): user pid=13688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171425001.959:64649): user pid=13689 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171425001.960:64650): user pid=13689 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171425001.968:64651): user pid=13688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171425001.968:64652): user pid=13688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171425301.297:64653): user pid=13726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171425301.297:64654): login pid=13726 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171425301.301:64655): user pid=13726 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171425301.301:64656): user pid=13726 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171425462.694:64657): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171425462.694:64657): arch=c000003e syscall=2 success=yes exit=12 a0=35f5800 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171425462.694:64658): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171425462.694:64658): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171425462.694:64658): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171425462.700:64659): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171425462.700:64659): arch=c000003e syscall=2 success=yes exit=9 a0=3218920 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171425463.224:64660): avc: denied { getattr } for pid=13758 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171425463.224:64660): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffff9058000 a2=7ffff9058000 a3=6c6280 items=0 ppid=29238 pid=13758 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171425463.224:64660): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171425463.225:64661): avc: denied { read } for pid=13758 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171425463.225:64661): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=13758 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171425468.201:64662): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171425468.201:64662): arch=c000003e syscall=86 success=yes exit=0 a0=3363300 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171425468.201:64663): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171425468.201:64663): arch=c000003e syscall=87 success=yes exit=0 a0=3363300 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171425468.202:64664): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171425468.202:64664): arch=c000003e syscall=2 success=yes exit=9 a0=30dbf40 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171425468.216:64665): avc: denied { write } for pid=13754 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171425468.216:64665): avc: denied { add_name } for pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171425468.216:64665): avc: denied { create } for pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171425468.216:64665): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=13749 pid=13754 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171425468.216:64666): avc: denied { write } for pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171425468.216:64666): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=13749 pid=13754 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171425468.216:64666): path="/home/dhighley/_6WD.8io0FB.douglas" >type=AVC msg=audit(1171425468.216:64667): avc: denied { getattr } for pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171425468.216:64667): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7fffe3da07a0 a2=7fffe3da07a0 a3=61a500 items=0 ppid=13749 pid=13754 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171425468.216:64667): path="/home/dhighley/_6WD.8io0FB.douglas" >type=AVC msg=audit(1171425468.216:64668): avc: denied { link } for pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171425468.216:64668): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffe3da06c0 a3=61a500 items=0 ppid=13749 pid=13754 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171425468.216:64669): avc: denied { remove_name } for pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171425468.216:64669): avc: denied { unlink } for pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171425468.216:64669): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffe3da06c0 a3=61a500 items=0 ppid=13749 pid=13754 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171425468.217:64670): avc: denied { append } for pid=13754 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171425468.217:64670): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=13749 pid=13754 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171425601.629:64671): user pid=13772 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171425601.629:64672): login pid=13772 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171425601.631:64673): user pid=13773 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171425601.632:64674): login pid=13773 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171425601.634:64675): user pid=13772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171425601.634:64676): user pid=13772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171425601.639:64677): user pid=13773 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171425601.639:64678): user pid=13773 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171425601.654:64679): user pid=13772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171425601.654:64680): user pid=13772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171425661.960:64681): user pid=13788 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171425661.960:64682): login pid=13788 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171425661.965:64683): user pid=13788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171425661.965:64684): user pid=13788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171425662.844:64685): user pid=13788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171425662.844:64686): user pid=13788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171425901.852:64687): user pid=13827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171425901.852:64688): login pid=13827 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171425901.857:64689): user pid=13827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171425901.857:64690): user pid=13827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171426201.178:64691): user pid=13861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171426201.178:64692): login pid=13861 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171426201.180:64693): user pid=13862 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171426201.180:64694): login pid=13862 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171426201.184:64695): user pid=13861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171426201.185:64696): user pid=13861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171426201.191:64697): user pid=13862 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171426201.191:64698): user pid=13862 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171426201.216:64699): user pid=13861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171426201.217:64700): user pid=13861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171426446.694:64701): user pid=12762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171426446.694:64702): user pid=12762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171426501.698:64703): user pid=13906 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171426501.698:64704): login pid=13906 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171426501.702:64705): user pid=13906 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171426501.703:64706): user pid=13906 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171426801.029:64707): user pid=13938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171426801.030:64708): login pid=13938 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171426801.032:64709): user pid=13939 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171426801.032:64710): login pid=13939 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171426801.034:64711): user pid=13938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171426801.034:64712): user pid=13938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171426801.038:64713): user pid=13939 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171426801.038:64714): user pid=13939 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171426801.054:64715): user pid=13938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171426801.054:64716): user pid=13938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171426859.598:64717): avc: denied { search } for pid=13964 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171426859.598:64717): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=13964 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171427101.379:64718): user pid=13986 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171427101.379:64719): login pid=13986 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171427101.382:64720): user pid=13986 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171427101.382:64721): user pid=13986 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171427401.701:64722): user pid=14022 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171427401.701:64723): login pid=14022 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171427401.702:64724): user pid=14021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171427401.703:64725): login pid=14021 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171427401.706:64726): user pid=14022 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171427401.706:64727): user pid=14022 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171427401.709:64728): user pid=14021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171427401.709:64729): user pid=14021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171427401.733:64730): user pid=14021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171427401.734:64731): user pid=14021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171427658.247:64732): avc: denied { search } for pid=14065 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171427658.247:64732): avc: denied { write } for pid=14065 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171427658.247:64732): avc: denied { add_name } for pid=14065 comm="pyzor" name="xh_P3d" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171427658.247:64732): avc: denied { create } for pid=14065 comm="pyzor" name="xh_P3d" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171427658.247:64732): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=14065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171427658.248:64733): avc: denied { getattr } for pid=14065 comm="pyzor" name="xh_P3d" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171427658.248:64733): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff430f59a0 a2=7fff430f59a0 a3=2 items=0 ppid=29238 pid=14065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171427658.248:64733): path="/tmp/xh_P3d" >type=AVC msg=audit(1171427658.248:64734): avc: denied { write } for pid=14065 comm="pyzor" name="xh_P3d" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171427658.248:64734): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8864 items=0 ppid=29238 pid=14065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171427658.248:64734): path="/tmp/xh_P3d" >type=AVC msg=audit(1171427658.248:64735): avc: denied { remove_name } for pid=14065 comm="pyzor" name="xh_P3d" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171427658.248:64735): avc: denied { unlink } for pid=14065 comm="pyzor" name="xh_P3d" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171427658.248:64735): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6c6280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=14065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171427658.730:64736): avc: denied { write } for pid=14061 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171427658.730:64736): avc: denied { add_name } for pid=14061 comm="procmail" name="_tbD.KFp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171427658.730:64736): arch=c000003e syscall=2 success=yes exit=6 a0=61c550 a1=c1 a2=124 a3=61c550 items=0 ppid=14056 pid=14061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171427658.730:64737): avc: denied { remove_name } for pid=14061 comm="procmail" name="_tbD.KFp0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171427658.730:64737): arch=c000003e syscall=87 success=yes exit=0 a0=61c550 a1=61b520 a2=7fffa1199ab0 a3=61c550 items=0 ppid=14056 pid=14061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171427658.730:64738): avc: denied { append } for pid=14061 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171427658.730:64738): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=14056 pid=14061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171427701.033:64739): user pid=14069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171427701.034:64740): login pid=14069 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171427701.036:64741): user pid=14069 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171427701.036:64742): user pid=14069 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171427800.745:64743): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171427800.745:64743): arch=c000003e syscall=2 success=yes exit=9 a0=3720cd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171427801.327:64744): avc: denied { getattr } for pid=14095 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171427801.327:64744): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff438ab850 a2=7fff438ab850 a3=6c6280 items=0 ppid=29238 pid=14095 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171427801.327:64744): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171427801.327:64745): avc: denied { read } for pid=14095 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171427801.327:64745): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=14095 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171427801.331:64746): avc: denied { read } for pid=14095 comm="pyzor" name="tmptNJZG8" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171427801.331:64746): arch=c000003e syscall=0 success=yes exit=4096 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=29238 pid=14095 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171427801.331:64746): path=2F746D702F746D70744E4A5A4738202864656C6574656429 >type=AVC msg=audit(1171427806.289:64747): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171427806.289:64747): arch=c000003e syscall=62 success=yes exit=0 a0=370f a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171427806.505:64748): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171427806.505:64748): arch=c000003e syscall=2 success=yes exit=9 a0=32766e0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171427806.735:64749): avc: denied { create } for pid=14091 comm="procmail" name="_LcD.eHp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171427806.735:64749): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=14088 pid=14091 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171427806.735:64750): avc: denied { write } for pid=14091 comm="procmail" name="_LcD.eHp0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171427806.735:64750): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=14088 pid=14091 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171427806.735:64750): path="/home/dhighley/_LcD.eHp0FB.douglas" >type=AVC msg=audit(1171427806.736:64751): avc: denied { getattr } for pid=14091 comm="procmail" name="_LcD.eHp0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171427806.736:64751): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff30acf4c0 a2=7fff30acf4c0 a3=61b650 items=0 ppid=14088 pid=14091 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171427806.736:64751): path="/home/dhighley/_LcD.eHp0FB.douglas" >type=AVC msg=audit(1171427806.736:64752): avc: denied { link } for pid=14091 comm="procmail" name="_LcD.eHp0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171427806.736:64752): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61e6c0 a2=7fff30acf3e0 a3=61b650 items=0 ppid=14088 pid=14091 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171427806.736:64753): avc: denied { unlink } for pid=14091 comm="procmail" name="_LcD.eHp0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171427806.736:64753): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e6c0 a2=7fff30acf3e0 a3=61b650 items=0 ppid=14088 pid=14091 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1171427898.107:64754): user pid=30241 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1171427898.108:64755): user pid=30241 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1171427910.210:64756): user pid=30241 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171427910.211:64757): user pid=30241 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171427910.221:64758): user pid=30241 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171427910.223:64759): login pid=30241 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171427910.262:64760): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171427910.263:64761): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171428001.364:64762): user pid=14331 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171428001.365:64763): login pid=14331 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171428001.367:64764): user pid=14332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171428001.368:64765): login pid=14332 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171428001.368:64766): user pid=14331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171428001.369:64767): user pid=14331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171428001.379:64768): user pid=14332 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171428001.379:64769): user pid=14332 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171428001.395:64770): user pid=14331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171428001.396:64771): user pid=14331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171428301.709:64772): user pid=14393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171428301.709:64773): login pid=14393 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171428301.712:64774): user pid=14393 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171428301.713:64775): user pid=14393 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171428325.210:64776): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.210:64776): arch=c000003e syscall=2 success=yes exit=12 a0=37256f0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171428325.210:64777): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.210:64777): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428325.210:64777): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171428325.216:64778): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.216:64778): arch=c000003e syscall=2 success=yes exit=9 a0=336fca0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171428325.708:64779): avc: denied { search } for pid=14412 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171428325.708:64779): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171428325.708:64780): avc: denied { search } for pid=14412 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171428325.708:64780): arch=c000003e syscall=4 success=yes exit=0 a0=6c6240 a1=7fffa5de6040 a2=7fffa5de6040 a3=6c6240 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171428325.708:64781): avc: denied { getattr } for pid=14412 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.708:64781): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffa5de6040 a2=7fffa5de6040 a3=6c6280 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428325.708:64781): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171428325.709:64782): avc: denied { read } for pid=14412 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.709:64782): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171428325.709:64783): avc: denied { search } for pid=14412 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171428325.709:64783): avc: denied { write } for pid=14412 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171428325.709:64783): avc: denied { add_name } for pid=14412 comm="pyzor" name="G6FgvH" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171428325.709:64783): avc: denied { create } for pid=14412 comm="pyzor" name="G6FgvH" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.709:64783): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171428325.710:64784): avc: denied { getattr } for pid=14412 comm="pyzor" name="G6FgvH" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.710:64784): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffa5de4940 a2=7fffa5de4940 a3=2 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428325.710:64784): path="/tmp/G6FgvH" >type=AVC msg=audit(1171428325.710:64785): avc: denied { write } for pid=14412 comm="pyzor" name="G6FgvH" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.710:64785): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428325.710:64785): path="/tmp/G6FgvH" >type=AVC msg=audit(1171428325.710:64786): avc: denied { remove_name } for pid=14412 comm="pyzor" name="G6FgvH" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171428325.710:64786): avc: denied { unlink } for pid=14412 comm="pyzor" name="G6FgvH" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.710:64786): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6c6280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171428325.738:64787): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634239 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.738:64787): arch=c000003e syscall=86 success=yes exit=0 a0=3201940 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171428325.738:64788): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634239 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.738:64788): arch=c000003e syscall=87 success=yes exit=0 a0=3201940 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171428325.739:64789): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.739:64789): arch=c000003e syscall=2 success=yes exit=9 a0=349a1c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171428325.822:64790): avc: denied { write } for pid=14408 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171428325.822:64790): avc: denied { add_name } for pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171428325.822:64790): avc: denied { create } for pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.822:64790): arch=c000003e syscall=2 success=yes exit=6 a0=61c5a0 a1=c1 a2=124 a3=61c5a0 items=0 ppid=14405 pid=14408 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171428325.823:64791): avc: denied { write } for pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.823:64791): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c5a0 items=0 ppid=14405 pid=14408 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428325.823:64791): path="/home/dhighley/_IhD.lPp0FB.douglas" >type=AVC msg=audit(1171428325.823:64792): avc: denied { getattr } for pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.823:64792): arch=c000003e syscall=4 success=yes exit=0 a0=61c5a0 a1=7fff779ea3e0 a2=7fff779ea3e0 a3=61c5a0 items=0 ppid=14405 pid=14408 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428325.823:64792): path="/home/dhighley/_IhD.lPp0FB.douglas" >type=AVC msg=audit(1171428325.823:64793): avc: denied { link } for pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.823:64793): arch=c000003e syscall=86 success=yes exit=0 a0=61c5a0 a1=61b520 a2=7fff779ea300 a3=61c5a0 items=0 ppid=14405 pid=14408 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171428325.823:64794): avc: denied { remove_name } for pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171428325.823:64794): avc: denied { unlink } for pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.823:64794): arch=c000003e syscall=87 success=yes exit=0 a0=61c5a0 a1=61b520 a2=7fff779ea300 a3=61c5a0 items=0 ppid=14405 pid=14408 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171428325.823:64795): avc: denied { append } for pid=14408 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171428325.823:64795): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=14405 pid=14408 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171428447.349:64796): avc: denied { create } for pid=14431 comm="pyzor" name="prc941" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171428447.349:64796): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=14431 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171428447.350:64797): avc: denied { getattr } for pid=14431 comm="pyzor" name="prc941" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171428447.350:64797): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb6216ac0 a2=7fffb6216ac0 a3=2 items=0 ppid=29238 pid=14431 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428447.350:64797): path="/tmp/prc941" >type=AVC msg=audit(1171428447.350:64798): avc: denied { write } for pid=14431 comm="pyzor" name="prc941" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171428447.350:64798): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=14431 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428447.350:64798): path="/tmp/prc941" >type=AVC msg=audit(1171428447.350:64799): avc: denied { unlink } for pid=14431 comm="pyzor" name="prc941" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171428447.350:64799): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=14431 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171428447.352:64800): avc: denied { read } for pid=14431 comm="pyzor" name="tmpQl1QeQ" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171428447.352:64800): arch=c000003e syscall=0 success=yes exit=648 a0=4 a1=2aaaaf34d000 a2=1000 a3=b2 items=0 ppid=29238 pid=14431 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428447.352:64800): path=2F746D702F746D70516C31516551202864656C6574656429 >type=AVC msg=audit(1171428452.311:64801): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171428452.311:64801): arch=c000003e syscall=62 success=yes exit=0 a0=385f a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171428601.043:64802): user pid=14625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171428601.043:64803): login pid=14625 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171428601.045:64804): user pid=14626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171428601.045:64805): login pid=14626 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171428601.048:64806): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171428601.049:64807): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171428601.051:64808): user pid=14626 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171428601.051:64809): user pid=14626 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171428601.076:64810): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171428601.077:64811): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171428685.503:64812): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428685.503:64812): arch=c000003e syscall=2 success=yes exit=12 a0=33cf730 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171428685.503:64813): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428685.503:64813): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428685.503:64813): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171428685.512:64814): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171428685.512:64814): arch=c000003e syscall=2 success=yes exit=9 a0=335ad00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171428686.108:64815): avc: denied { getattr } for pid=14652 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171428686.108:64815): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff82002fb0 a2=7fff82002fb0 a3=6c6280 items=0 ppid=29238 pid=14652 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428686.108:64815): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171428686.108:64816): avc: denied { read } for pid=14652 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171428686.108:64816): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=14652 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171428686.109:64817): avc: denied { search } for pid=14652 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171428686.109:64817): avc: denied { write } for pid=14652 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171428686.109:64817): avc: denied { add_name } for pid=14652 comm="pyzor" name="NEtBHe" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171428686.109:64817): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=14652 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171428686.109:64818): avc: denied { remove_name } for pid=14652 comm="pyzor" name="NEtBHe" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171428686.109:64818): arch=c000003e syscall=87 success=yes exit=0 a0=6226f0 a1=6d82b0 a2=37a8f2f4d8 a3=6226f0 items=0 ppid=29238 pid=14652 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171428691.069:64819): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171428691.069:64819): arch=c000003e syscall=62 success=yes exit=0 a0=393c a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171428691.077:64820): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634239 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428691.077:64820): arch=c000003e syscall=86 success=yes exit=0 a0=321a620 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171428691.078:64821): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634239 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428691.078:64821): arch=c000003e syscall=87 success=yes exit=0 a0=321a620 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171428691.078:64822): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171428691.078:64822): arch=c000003e syscall=2 success=yes exit=9 a0=32717c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171428691.091:64823): avc: denied { write } for pid=14648 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171428691.091:64823): avc: denied { add_name } for pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171428691.091:64823): avc: denied { create } for pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428691.091:64823): arch=c000003e syscall=2 success=yes exit=6 a0=6224d0 a1=c1 a2=124 a3=6224d0 items=0 ppid=14645 pid=14648 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171428691.092:64824): avc: denied { write } for pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428691.092:64824): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=6224d0 items=0 ppid=14645 pid=14648 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428691.092:64824): path="/home/dhighley/_4kD.TVp0FB.douglas" >type=AVC msg=audit(1171428691.092:64825): avc: denied { getattr } for pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428691.092:64825): arch=c000003e syscall=4 success=yes exit=0 a0=6224d0 a1=7fff5d343d30 a2=7fff5d343d30 a3=6224d0 items=0 ppid=14645 pid=14648 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428691.092:64825): path="/home/dhighley/_4kD.TVp0FB.douglas" >type=AVC msg=audit(1171428691.092:64826): avc: denied { link } for pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428691.092:64826): arch=c000003e syscall=86 success=yes exit=0 a0=6224d0 a1=61b520 a2=7fff5d343c50 a3=6224d0 items=0 ppid=14645 pid=14648 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171428691.092:64827): avc: denied { remove_name } for pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171428691.092:64827): avc: denied { unlink } for pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171428691.092:64827): arch=c000003e syscall=87 success=yes exit=0 a0=6224d0 a1=61b520 a2=7fff5d343c50 a3=6224d0 items=0 ppid=14645 pid=14648 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171428691.092:64828): avc: denied { append } for pid=14648 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171428691.092:64828): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=14645 pid=14648 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171428849.968:64829): avc: denied { getattr } for pid=14668 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171428849.968:64829): arch=c000003e syscall=4 success=yes exit=0 a0=8c4490 a1=7fff3523d890 a2=7fff3523d890 a3=3 items=0 ppid=30535 pid=14668 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428849.968:64829): path="/bin/hostname" >type=AVC msg=audit(1171428849.968:64830): avc: denied { execute } for pid=14668 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171428849.968:64830): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=1 a2=0 a3=3 items=0 ppid=30535 pid=14668 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1171428849.968:64831): avc: denied { read } for pid=14668 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171428849.968:64831): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=4 a2=0 a3=3 items=0 ppid=30535 pid=14668 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1171428849.968:64832): avc: denied { execute_no_trans } for pid=14668 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171428849.968:64832): arch=c000003e syscall=59 success=yes exit=0 a0=8c4490 a1=8c4bc0 a2=8c4750 a3=8 items=0 ppid=30535 pid=14668 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="hostname" exe="/bin/hostname" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171428849.968:64832): path="/bin/hostname" >type=USER_ACCT msg=audit(1171428901.398:64833): user pid=14682 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171428901.399:64834): login pid=14682 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171428901.401:64835): user pid=14682 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171428901.401:64836): user pid=14682 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171429201.739:64837): user pid=14726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171429201.739:64838): login pid=14726 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171429201.741:64839): user pid=14727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171429201.742:64840): login pid=14727 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171429201.742:64841): user pid=14728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171429201.742:64842): login pid=14728 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171429201.743:64843): user pid=14726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171429201.743:64844): user pid=14726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171429201.747:64845): user pid=14728 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171429201.747:64846): user pid=14728 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171429201.759:64847): user pid=14727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171429201.759:64848): user pid=14727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171429201.765:64849): user pid=14726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171429201.765:64850): user pid=14726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171429261.085:64851): user pid=14747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171429261.086:64852): login pid=14747 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171429261.089:64853): user pid=14747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171429261.090:64854): user pid=14747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171429262.011:64855): user pid=14747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171429262.011:64856): user pid=14747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171429501.021:64857): user pid=14782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171429501.022:64858): login pid=14782 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171429501.025:64859): user pid=14782 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171429501.025:64860): user pid=14782 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171429801.357:64861): user pid=14821 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171429801.358:64862): login pid=14821 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171429801.359:64863): user pid=14822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171429801.359:64864): login pid=14822 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171429801.362:64865): user pid=14821 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171429801.363:64866): user pid=14821 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171429801.365:64867): user pid=14822 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171429801.365:64868): user pid=14822 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171429801.383:64869): user pid=14821 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171429801.383:64870): user pid=14821 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171430101.702:64871): user pid=14936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171430101.703:64872): login pid=14936 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171430101.708:64873): user pid=14936 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171430101.708:64874): user pid=14936 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171430401.043:64875): user pid=14975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171430401.043:64876): login pid=14975 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171430401.044:64877): user pid=14976 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171430401.045:64878): login pid=14976 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171430401.049:64879): user pid=14975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171430401.049:64880): user pid=14975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171430401.052:64881): user pid=14976 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171430401.052:64882): user pid=14976 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171430401.078:64883): user pid=14975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171430401.078:64884): user pid=14975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171430482.907:64885): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171430482.907:64885): arch=c000003e syscall=2 success=yes exit=9 a0=35fa460 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171430484.055:64886): avc: denied { search } for pid=15002 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171430484.055:64886): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171430484.056:64887): avc: denied { getattr } for pid=15002 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171430484.056:64887): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff88b3bae0 a2=7fff88b3bae0 a3=6c6280 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171430484.056:64887): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171430484.056:64888): avc: denied { read } for pid=15002 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171430484.056:64888): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171430484.057:64889): avc: denied { search } for pid=15002 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171430484.057:64889): avc: denied { write } for pid=15002 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171430484.057:64889): avc: denied { add_name } for pid=15002 comm="pyzor" name="IdV15K" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171430484.057:64889): avc: denied { create } for pid=15002 comm="pyzor" name="IdV15K" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171430484.057:64889): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171430484.057:64890): avc: denied { getattr } for pid=15002 comm="pyzor" name="IdV15K" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171430484.057:64890): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff88b3a3e0 a2=7fff88b3a3e0 a3=2 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171430484.057:64890): path="/tmp/IdV15K" >type=AVC msg=audit(1171430484.057:64891): avc: denied { write } for pid=15002 comm="pyzor" name="IdV15K" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171430484.057:64891): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8864 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171430484.057:64891): path="/tmp/IdV15K" >type=AVC msg=audit(1171430484.058:64892): avc: denied { remove_name } for pid=15002 comm="pyzor" name="IdV15K" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171430484.058:64892): avc: denied { unlink } for pid=15002 comm="pyzor" name="IdV15K" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171430484.058:64892): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171430484.062:64893): avc: denied { read } for pid=15002 comm="pyzor" name="tmp-VZ-dQ" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171430484.062:64893): arch=c000003e syscall=0 success=yes exit=2620 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171430484.062:64893): path=2F746D702F746D702D565A2D6451202864656C6574656429 >type=AVC msg=audit(1171430489.017:64894): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171430489.017:64894): arch=c000003e syscall=62 success=yes exit=0 a0=3a9a a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171430489.257:64895): avc: denied { ioctl } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634230 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171430489.257:64895): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171430489.257:64895): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.29238" >type=AVC msg=audit(1171430489.257:64896): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634230 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171430489.257:64896): arch=c000003e syscall=86 success=yes exit=0 a0=30bfb10 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171430489.258:64897): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634230 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171430489.258:64897): arch=c000003e syscall=87 success=yes exit=0 a0=30bfb10 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171430489.258:64898): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171430489.258:64898): arch=c000003e syscall=2 success=yes exit=9 a0=3762ca0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171430489.328:64899): avc: denied { write } for pid=14998 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171430489.328:64899): avc: denied { add_name } for pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171430489.328:64899): avc: denied { create } for pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171430489.328:64899): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=14995 pid=14998 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171430489.328:64900): avc: denied { write } for pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171430489.328:64900): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=14995 pid=14998 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171430489.328:64900): path="/home/dhighley/_WqD.Zxp0FB.douglas" >type=AVC msg=audit(1171430489.328:64901): avc: denied { getattr } for pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171430489.328:64901): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff3fbe95a0 a2=7fff3fbe95a0 a3=61b650 items=0 ppid=14995 pid=14998 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171430489.328:64901): path="/home/dhighley/_WqD.Zxp0FB.douglas" >type=AVC msg=audit(1171430489.328:64902): avc: denied { link } for pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171430489.328:64902): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61d320 a2=7fff3fbe94c0 a3=61b650 items=0 ppid=14995 pid=14998 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171430489.328:64903): avc: denied { remove_name } for pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171430489.328:64903): avc: denied { unlink } for pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171430489.328:64903): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61d320 a2=7fff3fbe94c0 a3=61b650 items=0 ppid=14995 pid=14998 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171430489.329:64904): avc: denied { append } for pid=14998 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171430489.329:64904): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=14995 pid=14998 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171430701.400:64905): user pid=15019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171430701.400:64906): login pid=15019 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171430701.404:64907): user pid=15019 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171430701.404:64908): user pid=15019 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171430922.776:64909): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171430922.776:64909): arch=c000003e syscall=2 success=yes exit=12 a0=35f5b90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171431001.732:64910): user pid=15067 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171431001.732:64911): login pid=15067 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171431001.735:64912): user pid=15068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171431001.735:64913): login pid=15068 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171431001.736:64914): user pid=15067 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171431001.736:64915): user pid=15067 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171431001.740:64916): user pid=15068 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171431001.740:64917): user pid=15068 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171431001.758:64918): user pid=15067 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171431001.758:64919): user pid=15067 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171431301.072:64920): user pid=15112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171431301.072:64921): login pid=15112 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171431301.075:64922): user pid=15112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171431301.076:64923): user pid=15112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171431575.884:64924): avc: denied { search } for pid=15152 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171431575.884:64924): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15152 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171431575.885:64925): avc: denied { create } for pid=15152 comm="pyzor" name="4JFAwn" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171431575.885:64925): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=15152 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171431575.885:64926): avc: denied { getattr } for pid=15152 comm="pyzor" name="4JFAwn" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171431575.885:64926): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff2e9cce60 a2=7fff2e9cce60 a3=3 items=0 ppid=29238 pid=15152 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171431575.885:64926): path="/tmp/4JFAwn" >type=AVC msg=audit(1171431575.885:64927): avc: denied { write } for pid=15152 comm="pyzor" name="4JFAwn" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171431575.885:64927): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15804 items=0 ppid=29238 pid=15152 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171431575.885:64927): path="/tmp/4JFAwn" >type=AVC msg=audit(1171431575.886:64928): avc: denied { unlink } for pid=15152 comm="pyzor" name="4JFAwn" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171431575.886:64928): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=15152 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171431575.887:64929): avc: denied { read } for pid=15152 comm="pyzor" name="tmp_oAGPG" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171431575.887:64929): arch=c000003e syscall=0 success=yes exit=1090 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=15152 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171431575.887:64929): path=2F746D702F746D705F6F41475047202864656C6574656429 >type=USER_ACCT msg=audit(1171431601.404:64930): user pid=15158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171431601.405:64931): login pid=15158 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171431601.407:64932): user pid=15159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171431601.407:64933): login pid=15159 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171431601.408:64934): user pid=15158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171431601.408:64935): user pid=15158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171431601.414:64936): user pid=15159 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171431601.414:64937): user pid=15159 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171431601.427:64938): user pid=15158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171431601.428:64939): user pid=15158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171431818.173:64940): user pid=14846 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171431818.173:64941): user pid=14846 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1171431818.188:64942): user pid=14846 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1171431818.188:64943): user pid=14846 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1171431821.054:64944): user pid=14846 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1171431821.054:64945): user pid=14846 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1171431833.234:64946): user pid=15244 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=phighley : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171431833.235:64947): user pid=15244 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=phighley : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1171431833.250:64948): user pid=15244 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=phighley : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1171431833.250:64949): user pid=15244 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=phighley : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171431901.779:64950): user pid=15287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171431901.779:64951): login pid=15287 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171431901.783:64952): user pid=15287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171431901.783:64953): user pid=15287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171431982.411:64954): user pid=15244 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=phighley : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171432201.116:64955): user pid=15350 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171432201.116:64956): login pid=15350 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171432201.117:64957): user pid=15349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171432201.118:64958): login pid=15349 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171432201.120:64959): user pid=15350 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171432201.120:64960): user pid=15350 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171432201.123:64961): user pid=15349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171432201.123:64962): user pid=15349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171432201.148:64963): user pid=15349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171432201.149:64964): user pid=15349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171432471.681:64965): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171432471.682:64966): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171432501.459:64967): user pid=15446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171432501.460:64968): login pid=15446 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171432501.463:64969): user pid=15446 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171432501.463:64970): user pid=15446 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171432559.115:64971): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171432559.115:64971): arch=c000003e syscall=2 success=yes exit=12 a0=35c1cd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171432559.115:64972): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171432559.115:64972): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171432559.115:64972): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171432559.120:64973): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171432559.120:64973): arch=c000003e syscall=2 success=yes exit=9 a0=2d66ef0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171432559.886:64974): avc: denied { search } for pid=15469 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171432559.886:64974): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15469 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171432559.887:64975): avc: denied { getattr } for pid=15469 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171432559.887:64975): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff85af4b80 a2=7fff85af4b80 a3=6c6280 items=0 ppid=29238 pid=15469 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171432559.887:64975): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171432559.887:64976): avc: denied { read } for pid=15469 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171432559.887:64976): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15469 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171432559.887:64977): avc: denied { search } for pid=15469 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171432559.887:64977): avc: denied { write } for pid=15469 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171432559.887:64977): avc: denied { add_name } for pid=15469 comm="pyzor" name="KoqSfb" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171432559.887:64977): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=15469 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171432559.888:64978): avc: denied { remove_name } for pid=15469 comm="pyzor" name="KoqSfb" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171432559.888:64978): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6c6280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=15469 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171432560.256:64979): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634240 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171432560.256:64979): arch=c000003e syscall=86 success=yes exit=0 a0=3603110 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171432560.256:64980): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634240 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171432560.256:64980): arch=c000003e syscall=87 success=yes exit=0 a0=3603110 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171432560.257:64981): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171432560.257:64981): arch=c000003e syscall=2 success=yes exit=9 a0=31fa460 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171432560.273:64982): avc: denied { write } for pid=15465 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171432560.273:64982): avc: denied { add_name } for pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171432560.273:64982): avc: denied { create } for pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171432560.273:64982): arch=c000003e syscall=2 success=yes exit=6 a0=61c4b0 a1=c1 a2=124 a3=61c4b0 items=0 ppid=15462 pid=15465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171432560.274:64983): avc: denied { write } for pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171432560.274:64983): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c4b0 items=0 ppid=15462 pid=15465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171432560.274:64983): path="/home/dhighley/_pxD.wRq0FB.douglas" >type=AVC msg=audit(1171432560.274:64984): avc: denied { getattr } for pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171432560.274:64984): arch=c000003e syscall=4 success=yes exit=0 a0=61c4b0 a1=7fff7a188b80 a2=7fff7a188b80 a3=61c4b0 items=0 ppid=15462 pid=15465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171432560.274:64984): path="/home/dhighley/_pxD.wRq0FB.douglas" >type=AVC msg=audit(1171432560.274:64985): avc: denied { link } for pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171432560.274:64985): arch=c000003e syscall=86 success=yes exit=0 a0=61c4b0 a1=61b520 a2=7fff7a188aa0 a3=61c4b0 items=0 ppid=15462 pid=15465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171432560.274:64986): avc: denied { remove_name } for pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171432560.274:64986): avc: denied { unlink } for pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171432560.274:64986): arch=c000003e syscall=87 success=yes exit=0 a0=61c4b0 a1=61b520 a2=7fff7a188aa0 a3=61c4b0 items=0 ppid=15462 pid=15465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171432560.274:64987): avc: denied { append } for pid=15465 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171432560.274:64987): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=15462 pid=15465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171432774.232:64988): avc: denied { search } for pid=15504 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171432774.232:64988): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15504 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171432779.195:64989): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171432779.195:64989): arch=c000003e syscall=62 success=yes exit=0 a0=3c90 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171432801.801:64990): user pid=15509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171432801.802:64991): login pid=15509 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171432801.804:64992): user pid=15510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171432801.805:64993): login pid=15510 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171432801.805:64994): user pid=15509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171432801.805:64995): user pid=15509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171432801.817:64996): user pid=15510 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171432801.817:64997): user pid=15510 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171432801.829:64998): user pid=15509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171432801.830:64999): user pid=15509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171432861.140:65000): user pid=15525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171432861.140:65001): login pid=15525 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171432861.144:65002): user pid=15525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171432861.144:65003): user pid=15525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171432862.031:65004): user pid=15525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171432862.031:65005): user pid=15525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171433101.040:65006): user pid=15561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171433101.040:65007): login pid=15561 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171433101.043:65008): user pid=15561 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171433101.043:65009): user pid=15561 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171433401.367:65010): user pid=15599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171433401.367:65011): login pid=15599 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171433401.369:65012): user pid=15600 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171433401.370:65013): login pid=15600 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171433401.370:65014): user pid=15599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171433401.370:65015): user pid=15599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171433401.374:65016): user pid=15600 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171433401.375:65017): user pid=15600 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171433401.396:65018): user pid=15599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171433401.397:65019): user pid=15599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171433701.707:65020): user pid=15638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171433701.707:65021): login pid=15638 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171433701.711:65022): user pid=15638 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171433701.711:65023): user pid=15638 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171434001.030:65024): user pid=15671 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171434001.030:65025): login pid=15671 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171434001.032:65026): user pid=15672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171434001.032:65027): login pid=15672 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171434001.036:65028): user pid=15671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171434001.037:65029): user pid=15671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171434001.040:65030): user pid=15672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171434001.040:65031): user pid=15672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171434001.066:65032): user pid=15671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171434001.067:65033): user pid=15671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171434301.371:65034): user pid=15707 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171434301.371:65035): login pid=15707 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171434301.375:65036): user pid=15707 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171434301.375:65037): user pid=15707 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171434428.696:65038): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171434428.696:65038): arch=c000003e syscall=2 success=yes exit=12 a0=3562240 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171434428.696:65039): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171434428.696:65039): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171434428.696:65039): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171434428.702:65040): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171434428.702:65040): arch=c000003e syscall=2 success=yes exit=9 a0=3335270 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171434429.313:65041): avc: denied { getattr } for pid=15736 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171434429.313:65041): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff75e21dc0 a2=7fff75e21dc0 a3=6c6280 items=0 ppid=29238 pid=15736 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171434429.313:65041): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171434429.314:65042): avc: denied { read } for pid=15736 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171434429.314:65042): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15736 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171434429.314:65043): avc: denied { search } for pid=15736 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171434429.314:65043): avc: denied { write } for pid=15736 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171434429.314:65043): avc: denied { add_name } for pid=15736 comm="pyzor" name="K7LDWQ" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171434429.314:65043): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=15736 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171434429.315:65044): avc: denied { remove_name } for pid=15736 comm="pyzor" name="K7LDWQ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171434429.315:65044): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=15736 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171434434.275:65045): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171434434.275:65045): arch=c000003e syscall=62 success=yes exit=0 a0=3d78 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171434434.290:65046): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634240 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171434434.290:65046): arch=c000003e syscall=86 success=yes exit=0 a0=304a690 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171434434.290:65047): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634240 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171434434.290:65047): arch=c000003e syscall=87 success=yes exit=0 a0=304a690 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171434434.291:65048): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171434434.291:65048): arch=c000003e syscall=2 success=yes exit=9 a0=2fc44a0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171434434.352:65049): avc: denied { write } for pid=15732 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171434434.352:65049): avc: denied { add_name } for pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171434434.352:65049): avc: denied { create } for pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171434434.352:65049): arch=c000003e syscall=2 success=yes exit=6 a0=61cbc0 a1=c1 a2=124 a3=61cbc0 items=0 ppid=15727 pid=15732 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171434434.352:65050): avc: denied { write } for pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171434434.352:65050): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cbc0 items=0 ppid=15727 pid=15732 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171434434.352:65050): path="/home/dhighley/_01D.Cvq0FB.douglas" >type=AVC msg=audit(1171434434.352:65051): avc: denied { getattr } for pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171434434.352:65051): arch=c000003e syscall=4 success=yes exit=0 a0=61cbc0 a1=7fffb369a090 a2=7fffb369a090 a3=61cbc0 items=0 ppid=15727 pid=15732 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171434434.352:65051): path="/home/dhighley/_01D.Cvq0FB.douglas" >type=AVC msg=audit(1171434434.352:65052): avc: denied { link } for pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171434434.352:65052): arch=c000003e syscall=86 success=yes exit=0 a0=61cbc0 a1=61b520 a2=7fffb3699fb0 a3=61cbc0 items=0 ppid=15727 pid=15732 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171434434.352:65053): avc: denied { remove_name } for pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171434434.352:65053): avc: denied { unlink } for pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171434434.352:65053): arch=c000003e syscall=87 success=yes exit=0 a0=61cbc0 a1=61b520 a2=7fffb3699fb0 a3=61cbc0 items=0 ppid=15727 pid=15732 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171434434.353:65054): avc: denied { append } for pid=15732 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171434434.353:65054): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=15727 pid=15732 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171434601.694:65055): user pid=15754 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171434601.694:65056): login pid=15754 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171434601.696:65057): user pid=15755 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171434601.696:65058): login pid=15755 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171434601.698:65059): user pid=15754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171434601.698:65060): user pid=15754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171434601.702:65061): user pid=15755 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171434601.703:65062): user pid=15755 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171434601.720:65063): user pid=15754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171434601.720:65064): user pid=15754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171434901.043:65065): user pid=15793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171434901.043:65066): login pid=15793 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171434901.047:65067): user pid=15793 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171434901.047:65068): user pid=15793 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171434922.236:65069): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1171434922.237:65070): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1171434932.379:65071): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171434932.380:65072): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171434932.389:65073): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171434932.394:65074): login pid=30241 uid=0 old auid=1000 new auid=1000 >type=USER_START msg=audit(1171434932.403:65075): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171434932.404:65076): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171435201.379:65077): user pid=16136 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171435201.379:65078): login pid=16136 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171435201.383:65079): user pid=16135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171435201.383:65080): login pid=16135 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171435201.385:65081): user pid=16136 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171435201.385:65082): user pid=16136 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171435201.389:65083): user pid=16135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171435201.389:65084): user pid=16135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171435201.417:65085): user pid=16135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171435201.418:65086): user pid=16135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171435292.110:65087): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435292.110:65087): arch=c000003e syscall=2 success=yes exit=12 a0=33cb710 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171435292.110:65088): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435292.110:65088): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171435292.110:65088): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171435292.117:65089): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171435292.117:65089): arch=c000003e syscall=2 success=yes exit=9 a0=375d3b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171435292.735:65090): avc: denied { search } for pid=16207 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171435292.735:65090): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171435292.735:65091): avc: denied { getattr } for pid=16207 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171435292.735:65091): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb2157100 a2=7fffb2157100 a3=6c6280 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171435292.735:65091): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171435292.736:65092): avc: denied { read } for pid=16207 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171435292.736:65092): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171435292.736:65093): avc: denied { search } for pid=16207 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171435292.736:65093): avc: denied { write } for pid=16207 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171435292.736:65093): avc: denied { add_name } for pid=16207 comm="pyzor" name="jwMzsp" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171435292.736:65093): avc: denied { create } for pid=16207 comm="pyzor" name="jwMzsp" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171435292.736:65093): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171435292.737:65094): avc: denied { getattr } for pid=16207 comm="pyzor" name="jwMzsp" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171435292.737:65094): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb21555f0 a2=7fffb21555f0 a3=3 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171435292.737:65094): path="/tmp/jwMzsp" >type=AVC msg=audit(1171435292.737:65095): avc: denied { write } for pid=16207 comm="pyzor" name="jwMzsp" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171435292.737:65095): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171435292.737:65095): path="/tmp/jwMzsp" >type=AVC msg=audit(1171435292.737:65096): avc: denied { remove_name } for pid=16207 comm="pyzor" name="jwMzsp" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171435292.737:65096): avc: denied { unlink } for pid=16207 comm="pyzor" name="jwMzsp" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171435292.737:65096): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171435292.739:65097): avc: denied { read } for pid=16207 comm="pyzor" name="tmpTStOxC" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171435292.739:65097): arch=c000003e syscall=0 success=yes exit=1041 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d88f4 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171435292.739:65097): path=2F746D702F746D705453744F7843202864656C6574656429 >type=AVC msg=audit(1171435297.698:65098): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171435297.698:65098): arch=c000003e syscall=62 success=yes exit=0 a0=3f4f a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171435297.768:65099): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634194 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435297.768:65099): arch=c000003e syscall=86 success=yes exit=0 a0=338e2f0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171435297.768:65100): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634194 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435297.768:65100): arch=c000003e syscall=87 success=yes exit=0 a0=338e2f0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171435297.769:65101): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171435297.769:65101): arch=c000003e syscall=2 success=yes exit=9 a0=3131990 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171435297.840:65102): avc: denied { write } for pid=16203 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171435297.840:65102): avc: denied { add_name } for pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171435297.840:65102): avc: denied { create } for pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435297.840:65102): arch=c000003e syscall=2 success=yes exit=6 a0=61b640 a1=c1 a2=124 a3=61b640 items=0 ppid=16200 pid=16203 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171435297.841:65103): avc: denied { write } for pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435297.841:65103): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b640 items=0 ppid=16200 pid=16203 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171435297.841:65103): path="/home/dhighley/_L9D.h8q0FB.douglas" >type=AVC msg=audit(1171435297.841:65104): avc: denied { getattr } for pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435297.841:65104): arch=c000003e syscall=4 success=yes exit=0 a0=61b640 a1=7fffbd398d90 a2=7fffbd398d90 a3=61b640 items=0 ppid=16200 pid=16203 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171435297.841:65104): path="/home/dhighley/_L9D.h8q0FB.douglas" >type=AVC msg=audit(1171435297.841:65105): avc: denied { link } for pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435297.841:65105): arch=c000003e syscall=86 success=yes exit=0 a0=61b640 a1=61cd10 a2=7fffbd398cb0 a3=61b640 items=0 ppid=16200 pid=16203 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171435297.841:65106): avc: denied { remove_name } for pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171435297.841:65106): avc: denied { unlink } for pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435297.841:65106): arch=c000003e syscall=87 success=yes exit=0 a0=61b640 a1=61cd10 a2=7fffbd398cb0 a3=61b640 items=0 ppid=16200 pid=16203 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171435297.841:65107): avc: denied { append } for pid=16203 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171435297.841:65107): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16200 pid=16203 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171435501.750:65108): user pid=16269 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171435501.751:65109): login pid=16269 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171435501.754:65110): user pid=16269 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171435501.754:65111): user pid=16269 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171435525.952:65112): user pid=16282 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171435525.952:65113): user pid=16282 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1171435525.961:65114): user pid=16282 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1171435525.961:65115): user pid=16282 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1171435581.238:65116): user pid=16353 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1171435581.238:65117): user pid=16353 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1171435581.249:65118): user pid=16353 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1171435581.249:65119): user pid=16353 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1171435608.155:65120): user pid=16353 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1171435608.155:65121): user pid=16353 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1171435720.702:65122): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435720.702:65122): arch=c000003e syscall=2 success=yes exit=12 a0=37433c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171435720.702:65123): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435720.702:65123): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171435720.702:65123): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171435720.709:65124): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171435720.709:65124): arch=c000003e syscall=2 success=yes exit=9 a0=33f3a00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171435721.457:65125): avc: denied { search } for pid=16605 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171435721.457:65125): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171435721.457:65126): avc: denied { getattr } for pid=16605 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171435721.457:65126): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff8d4f54a0 a2=7fff8d4f54a0 a3=6c6280 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171435721.457:65126): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171435721.457:65127): avc: denied { read } for pid=16605 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171435721.457:65127): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171435721.458:65128): avc: denied { search } for pid=16605 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171435721.458:65128): avc: denied { write } for pid=16605 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171435721.458:65128): avc: denied { add_name } for pid=16605 comm="pyzor" name="3N_xk8" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171435721.458:65128): avc: denied { create } for pid=16605 comm="pyzor" name="3N_xk8" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171435721.458:65128): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171435721.458:65129): avc: denied { getattr } for pid=16605 comm="pyzor" name="3N_xk8" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171435721.458:65129): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff8d4f3da0 a2=7fff8d4f3da0 a3=2 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171435721.458:65129): path="/tmp/3N_xk8" >type=AVC msg=audit(1171435721.458:65130): avc: denied { write } for pid=16605 comm="pyzor" name="3N_xk8" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171435721.458:65130): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171435721.458:65130): path="/tmp/3N_xk8" >type=AVC msg=audit(1171435721.458:65131): avc: denied { remove_name } for pid=16605 comm="pyzor" name="3N_xk8" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171435721.458:65131): avc: denied { unlink } for pid=16605 comm="pyzor" name="3N_xk8" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171435721.458:65131): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171435721.461:65132): avc: denied { read } for pid=16605 comm="pyzor" name="tmpzz1Mqn" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171435721.461:65132): arch=c000003e syscall=0 success=yes exit=994 a0=4 a1=2aaaaf34d000 a2=1000 a3=ad items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171435721.461:65132): path=2F746D702F746D707A7A314D716E202864656C6574656429 >type=AVC msg=audit(1171435726.419:65133): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171435726.419:65133): arch=c000003e syscall=62 success=yes exit=0 a0=40dd a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171435726.596:65134): avc: denied { ioctl } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435726.596:65134): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171435726.596:65134): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.29238" >type=AVC msg=audit(1171435726.597:65135): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435726.597:65135): arch=c000003e syscall=86 success=yes exit=0 a0=2fd3e20 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171435726.597:65136): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171435726.597:65136): arch=c000003e syscall=87 success=yes exit=0 a0=2fd3e20 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171435726.598:65137): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171435726.598:65137): arch=c000003e syscall=2 success=yes exit=9 a0=3029ea0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171435801.101:65138): user pid=16612 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171435801.101:65139): login pid=16612 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171435801.104:65140): user pid=16613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171435801.104:65141): login pid=16613 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171435801.106:65142): user pid=16612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171435801.106:65143): user pid=16612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171435801.109:65144): user pid=16613 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171435801.109:65145): user pid=16613 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171435801.140:65146): user pid=16612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171435801.140:65147): user pid=16612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171435923.903:65148): user pid=16282 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1171435923.904:65149): user pid=16282 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171436101.441:65150): user pid=16798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171436101.442:65151): login pid=16798 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171436101.445:65152): user pid=16798 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171436101.445:65153): user pid=16798 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171436110.994:65154): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436110.994:65154): arch=c000003e syscall=2 success=yes exit=12 a0=3221ee0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171436110.994:65155): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436110.994:65155): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436110.994:65155): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171436111.000:65156): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171436111.000:65156): arch=c000003e syscall=2 success=yes exit=9 a0=3257340 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171436111.626:65157): avc: denied { search } for pid=16817 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171436111.626:65157): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171436111.626:65158): avc: denied { getattr } for pid=16817 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171436111.626:65158): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb749c440 a2=7fffb749c440 a3=6c6280 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436111.626:65158): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171436111.626:65159): avc: denied { read } for pid=16817 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171436111.626:65159): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171436111.627:65160): avc: denied { search } for pid=16817 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171436111.627:65160): avc: denied { write } for pid=16817 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171436111.627:65160): avc: denied { add_name } for pid=16817 comm="pyzor" name="CickoC" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171436111.627:65160): avc: denied { create } for pid=16817 comm="pyzor" name="CickoC" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171436111.627:65160): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171436111.627:65161): avc: denied { getattr } for pid=16817 comm="pyzor" name="CickoC" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171436111.627:65161): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb749a930 a2=7fffb749a930 a3=3 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436111.627:65161): path="/tmp/CickoC" >type=AVC msg=audit(1171436111.627:65162): avc: denied { write } for pid=16817 comm="pyzor" name="CickoC" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171436111.627:65162): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436111.627:65162): path="/tmp/CickoC" >type=AVC msg=audit(1171436111.627:65163): avc: denied { remove_name } for pid=16817 comm="pyzor" name="CickoC" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171436111.627:65163): avc: denied { unlink } for pid=16817 comm="pyzor" name="CickoC" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171436111.627:65163): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171436111.628:65164): avc: denied { read } for pid=16817 comm="pyzor" name="tmpkxfVDu" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171436111.628:65164): arch=c000003e syscall=0 success=yes exit=768 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436111.628:65164): path=2F746D702F746D706B7866564475202864656C6574656429 >type=AVC msg=audit(1171436116.589:65165): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171436116.589:65165): arch=c000003e syscall=62 success=yes exit=0 a0=41b1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171436117.085:65166): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634194 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436117.085:65166): arch=c000003e syscall=86 success=yes exit=0 a0=3212ca0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171436117.086:65167): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634194 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436117.086:65167): arch=c000003e syscall=87 success=yes exit=0 a0=3212ca0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171436117.087:65168): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171436117.087:65168): arch=c000003e syscall=2 success=yes exit=9 a0=312f4c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171436117.131:65169): avc: denied { write } for pid=16813 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171436117.131:65169): avc: denied { add_name } for pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171436117.131:65169): avc: denied { create } for pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436117.131:65169): arch=c000003e syscall=2 success=yes exit=6 a0=61c940 a1=c1 a2=124 a3=61c940 items=0 ppid=16810 pid=16813 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171436117.132:65170): avc: denied { write } for pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436117.132:65170): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c940 items=0 ppid=16810 pid=16813 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436117.132:65170): path="/home/dhighley/_tGE.VJr0FB.douglas" >type=AVC msg=audit(1171436117.133:65171): avc: denied { getattr } for pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436117.133:65171): arch=c000003e syscall=4 success=yes exit=0 a0=61c940 a1=7fff24f5a950 a2=7fff24f5a950 a3=61c940 items=0 ppid=16810 pid=16813 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436117.133:65171): path="/home/dhighley/_tGE.VJr0FB.douglas" >type=AVC msg=audit(1171436117.133:65172): avc: denied { link } for pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436117.133:65172): arch=c000003e syscall=86 success=yes exit=0 a0=61c940 a1=61b520 a2=7fff24f5a870 a3=61c940 items=0 ppid=16810 pid=16813 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171436117.133:65173): avc: denied { remove_name } for pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171436117.133:65173): avc: denied { unlink } for pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436117.133:65173): arch=c000003e syscall=87 success=yes exit=0 a0=61c940 a1=61b520 a2=7fff24f5a870 a3=61c940 items=0 ppid=16810 pid=16813 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171436117.133:65174): avc: denied { append } for pid=16813 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171436117.133:65174): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16810 pid=16813 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_END msg=audit(1171436206.262:65175): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171436206.263:65176): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=AVC msg=audit(1171436400.898:65177): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=12485716 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436400.898:65177): arch=c000003e syscall=2 success=yes exit=12 a0=333ea20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171436400.899:65178): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=12485716 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436400.899:65178): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436400.899:65178): path="/home/phighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171436400.919:65179): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=12487199 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171436400.919:65179): arch=c000003e syscall=2 success=yes exit=9 a0=371fcf0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171436401.799:65180): user pid=16905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171436401.799:65181): login pid=16905 uid=0 old auid=4294967295 new auid=0 >type=AVC msg=audit(1171436401.804:65182): avc: denied { search } for pid=16904 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171436401.804:65182): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171436401.805:65183): avc: denied { getattr } for pid=16904 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436401.805:65183): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff46a67a10 a2=7fff46a67a10 a3=6c6280 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436401.805:65183): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171436401.805:65184): avc: denied { read } for pid=16904 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436401.805:65184): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171436401.806:65185): avc: denied { search } for pid=16904 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171436401.806:65185): avc: denied { write } for pid=16904 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171436401.806:65185): avc: denied { add_name } for pid=16904 comm="pyzor" name="4XpJpT" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171436401.806:65185): avc: denied { create } for pid=16904 comm="pyzor" name="4XpJpT" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171436401.806:65185): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171436401.806:65186): avc: denied { getattr } for pid=16904 comm="pyzor" name="4XpJpT" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171436401.806:65186): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff46a66310 a2=7fff46a66310 a3=2 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436401.806:65186): path="/tmp/4XpJpT" >type=AVC msg=audit(1171436401.806:65187): avc: denied { write } for pid=16904 comm="pyzor" name="4XpJpT" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171436401.806:65187): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8864 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436401.806:65187): path="/tmp/4XpJpT" >type=AVC msg=audit(1171436401.806:65188): avc: denied { remove_name } for pid=16904 comm="pyzor" name="4XpJpT" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171436401.806:65188): avc: denied { unlink } for pid=16904 comm="pyzor" name="4XpJpT" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171436401.806:65188): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171436401.838:65189): user pid=16906 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171436401.838:65190): login pid=16906 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171436401.839:65191): user pid=16905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171436401.839:65192): user pid=16905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171436401.848:65193): avc: denied { read } for pid=16904 comm="pyzor" name="tmpOpOYtF" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171436401.848:65193): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=2761 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436401.848:65193): path=2F746D702F746D704F704F597446202864656C6574656429 >type=USER_START msg=audit(1171436401.850:65194): user pid=16906 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171436401.850:65195): user pid=16906 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171436401.907:65196): avc: denied { append } for pid=31334 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171436401.907:65196): arch=c000003e syscall=2 success=yes exit=9 a0=31c68b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=31334 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=CRED_DISP msg=audit(1171436401.924:65197): user pid=16905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171436401.925:65198): user pid=16905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171436402.485:65199): avc: denied { getattr } for pid=16918 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171436402.485:65199): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff81dbbd60 a2=7fff81dbbd60 a3=6c6280 items=0 ppid=31334 pid=16918 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436402.485:65199): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171436402.486:65200): avc: denied { read } for pid=16918 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171436402.486:65200): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=31334 pid=16918 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171436406.759:65201): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171436406.759:65201): arch=c000003e syscall=62 success=yes exit=0 a0=4208 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171436407.123:65202): avc: denied { ioctl } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436407.123:65202): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436407.123:65202): path="/home/phighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.29238" >type=AVC msg=audit(1171436407.124:65203): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436407.124:65203): arch=c000003e syscall=86 success=yes exit=0 a0=33cf0d0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171436407.124:65204): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436407.124:65204): arch=c000003e syscall=87 success=yes exit=0 a0=33cf0d0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171436407.125:65205): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=12487184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171436407.125:65205): arch=c000003e syscall=2 success=yes exit=9 a0=3721650 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171436407.219:65206): avc: denied { write } for pid=16893 comm="procmail" name="phighley" dev=dm-0 ino=12485733 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171436407.219:65206): avc: denied { add_name } for pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171436407.219:65206): avc: denied { create } for pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436407.219:65206): arch=c000003e syscall=2 success=yes exit=6 a0=61b630 a1=c1 a2=124 a3=61b630 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171436407.219:65207): avc: denied { write } for pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436407.219:65207): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b630 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436407.219:65207): path="/home/phighley/_9HE.3Nr0FB.douglas" >type=AVC msg=audit(1171436407.220:65208): avc: denied { getattr } for pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436407.220:65208): arch=c000003e syscall=4 success=yes exit=0 a0=61b630 a1=7fff7828dc60 a2=7fff7828dc60 a3=61b630 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436407.220:65208): path="/home/phighley/_9HE.3Nr0FB.douglas" >type=AVC msg=audit(1171436407.220:65209): avc: denied { link } for pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436407.220:65209): arch=c000003e syscall=86 success=yes exit=0 a0=61b630 a1=624040 a2=7fff7828db80 a3=61b630 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171436407.220:65210): avc: denied { remove_name } for pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171436407.220:65210): avc: denied { unlink } for pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436407.220:65210): arch=c000003e syscall=87 success=yes exit=0 a0=61b630 a1=624040 a2=7fff7828db80 a3=61b630 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171436407.220:65211): avc: denied { append } for pid=16893 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436407.220:65211): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171436407.220:65212): avc: denied { lock } for pid=16893 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436407.220:65212): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171436407.220:65212): path="/home/phighley/spamlog" >type=AVC msg=audit(1171436407.578:65213): avc: denied { append } for pid=16900 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171436407.578:65213): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16897 pid=16900 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171436451.468:65214): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171436451.468:65214): arch=c000003e syscall=2 success=yes exit=12 a0=35be270 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171436461.195:65215): user pid=16932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171436461.195:65216): login pid=16932 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171436461.198:65217): user pid=16932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171436461.198:65218): user pid=16932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171436462.089:65219): user pid=16932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171436462.089:65220): user pid=16932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171436701.097:65221): user pid=16970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171436701.097:65222): login pid=16970 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171436701.101:65223): user pid=16970 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171436701.101:65224): user pid=16970 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171437001.424:65225): user pid=17007 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171437001.425:65226): login pid=17007 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171437001.427:65227): user pid=17008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171437001.427:65229): login pid=17008 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171437001.427:65228): user pid=17007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171437001.427:65230): user pid=17007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171437001.437:65231): user pid=17008 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171437001.437:65232): user pid=17008 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171437001.448:65233): user pid=17007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171437001.448:65234): user pid=17007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171437191.100:65235): user pid=14727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171437191.100:65236): user pid=14727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171437301.106:65237): user pid=17045 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171437301.106:65238): login pid=17045 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171437301.110:65239): user pid=17045 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171437301.111:65240): user pid=17045 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171437601.450:65241): user pid=17079 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171437601.451:65242): login pid=17079 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171437601.453:65243): user pid=17080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171437601.453:65244): login pid=17080 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171437601.454:65245): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171437601.455:65246): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171437601.460:65247): user pid=17080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171437601.460:65248): user pid=17080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171437601.473:65249): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171437601.473:65250): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171437901.786:65251): user pid=17114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171437901.786:65252): login pid=17114 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171437901.789:65253): user pid=17114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171437901.789:65254): user pid=17114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171438201.113:65255): user pid=17147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171438201.113:65256): login pid=17147 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171438201.115:65257): user pid=17148 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171438201.115:65258): login pid=17148 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171438201.116:65259): user pid=17147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171438201.116:65260): user pid=17147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171438201.127:65261): user pid=17148 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171438201.127:65262): user pid=17148 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171438201.133:65263): user pid=17147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171438201.134:65264): user pid=17147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171438501.459:65265): user pid=17183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171438501.460:65266): login pid=17183 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171438501.462:65267): user pid=17183 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171438501.463:65268): user pid=17183 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171438801.783:65269): user pid=17217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171438801.783:65270): login pid=17217 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171438801.785:65271): user pid=17218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171438801.786:65272): login pid=17218 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171438801.788:65273): user pid=17217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171438801.788:65274): user pid=17217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171438801.796:65275): user pid=17218 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171438801.797:65276): user pid=17218 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171438801.805:65277): user pid=17217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171438801.806:65278): user pid=17217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171438981.404:65279): avc: denied { search } for pid=17257 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171438981.404:65279): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=17257 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171438981.405:65280): avc: denied { search } for pid=17257 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171438981.405:65280): avc: denied { write } for pid=17257 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171438981.405:65280): avc: denied { add_name } for pid=17257 comm="pyzor" name="C-TtUM" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171438981.405:65280): avc: denied { create } for pid=17257 comm="pyzor" name="C-TtUM" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171438981.405:65280): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=17257 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171438981.406:65281): avc: denied { getattr } for pid=17257 comm="pyzor" name="C-TtUM" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171438981.406:65281): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff7736bc10 a2=7fff7736bc10 a3=2 items=0 ppid=29238 pid=17257 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171438981.406:65281): path="/tmp/C-TtUM" >type=AVC msg=audit(1171438981.406:65282): avc: denied { write } for pid=17257 comm="pyzor" name="C-TtUM" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171438981.406:65282): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=17257 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171438981.406:65282): path="/tmp/C-TtUM" >type=AVC msg=audit(1171438981.406:65283): avc: denied { remove_name } for pid=17257 comm="pyzor" name="C-TtUM" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171438981.406:65283): avc: denied { unlink } for pid=17257 comm="pyzor" name="C-TtUM" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171438981.406:65283): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=17257 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171438981.412:65284): avc: denied { read } for pid=17257 comm="pyzor" name="tmpZhHPpc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171438981.412:65284): arch=c000003e syscall=0 success=yes exit=1483 a0=4 a1=2aaaaf34d000 a2=1000 a3=fb items=0 ppid=29238 pid=17257 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171438981.412:65284): path=2F746D702F746D705A6848507063202864656C6574656429 >type=USER_ACCT msg=audit(1171439101.128:65285): user pid=17272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171439101.128:65286): login pid=17272 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171439101.131:65287): user pid=17272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171439101.132:65288): user pid=17272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171439401.460:65289): user pid=17311 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171439401.460:65290): login pid=17311 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171439401.463:65291): user pid=17312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171439401.463:65292): login pid=17312 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171439401.465:65293): user pid=17311 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171439401.465:65294): user pid=17311 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171439401.467:65295): user pid=17312 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171439401.467:65296): user pid=17312 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171439401.487:65297): user pid=17311 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171439401.487:65298): user pid=17311 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171439498.728:65299): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171439498.728:65299): arch=c000003e syscall=2 success=yes exit=12 a0=35e7260 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171439498.728:65300): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171439498.728:65300): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171439498.728:65300): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171439498.736:65301): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171439498.736:65301): arch=c000003e syscall=2 success=yes exit=9 a0=32b8be0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171439499.397:65302): avc: denied { getattr } for pid=17345 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171439499.397:65302): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff2d50f4b0 a2=7fff2d50f4b0 a3=6c6280 items=0 ppid=29238 pid=17345 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171439499.397:65302): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171439499.398:65303): avc: denied { read } for pid=17345 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171439499.398:65303): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=17345 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171439504.359:65304): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171439504.359:65304): arch=c000003e syscall=62 success=yes exit=0 a0=43c1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171439504.372:65305): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171439504.372:65305): arch=c000003e syscall=86 success=yes exit=0 a0=347d9d0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171439504.373:65306): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171439504.373:65306): arch=c000003e syscall=87 success=yes exit=0 a0=347d9d0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171439504.373:65307): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171439504.373:65307): arch=c000003e syscall=2 success=yes exit=9 a0=35772a0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171439504.389:65308): avc: denied { write } for pid=17341 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171439504.389:65308): avc: denied { add_name } for pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171439504.389:65308): avc: denied { create } for pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171439504.389:65308): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=17336 pid=17341 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171439504.389:65309): avc: denied { write } for pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171439504.389:65309): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=17336 pid=17341 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171439504.389:65309): path="/home/dhighley/_9OE.Q-r0FB.douglas" >type=AVC msg=audit(1171439504.389:65310): avc: denied { getattr } for pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171439504.389:65310): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7fff70555f50 a2=7fff70555f50 a3=61a500 items=0 ppid=17336 pid=17341 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171439504.389:65310): path="/home/dhighley/_9OE.Q-r0FB.douglas" >type=AVC msg=audit(1171439504.390:65311): avc: denied { link } for pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171439504.390:65311): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff70555e70 a3=61a500 items=0 ppid=17336 pid=17341 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171439504.390:65312): avc: denied { remove_name } for pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171439504.390:65312): avc: denied { unlink } for pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171439504.390:65312): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff70555e70 a3=61a500 items=0 ppid=17336 pid=17341 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171439504.390:65313): avc: denied { append } for pid=17341 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171439504.390:65313): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=17336 pid=17341 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171439581.790:65314): user pid=17357 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171439581.790:65315): login pid=17357 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171439581.795:65316): user pid=17357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171439581.795:65317): user pid=17357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171439581.996:65318): user pid=17357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171439581.996:65319): user pid=17357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171439702.003:65320): user pid=17375 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171439702.003:65321): login pid=17375 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171439702.006:65322): user pid=17375 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171439702.006:65323): user pid=17375 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171440001.336:65324): user pid=17411 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171440001.336:65325): login pid=17411 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171440001.337:65326): user pid=17413 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171440001.337:65327): login pid=17413 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171440001.338:65328): user pid=17412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171440001.338:65329): login pid=17412 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171440001.342:65330): user pid=17411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171440001.342:65331): user pid=17411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171440001.346:65332): user pid=17413 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171440001.346:65333): user pid=17413 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171440001.348:65334): user pid=17412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171440001.348:65335): user pid=17412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171440001.372:65336): user pid=17411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171440001.373:65337): user pid=17411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171440061.677:65338): user pid=17432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171440061.677:65339): login pid=17432 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171440061.681:65340): user pid=17432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171440061.681:65341): user pid=17432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171440062.565:65342): user pid=17432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171440062.566:65343): user pid=17432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171440301.575:65344): user pid=17484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171440301.575:65345): login pid=17484 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171440301.577:65346): user pid=17484 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171440301.577:65347): user pid=17484 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171440601.903:65348): user pid=17522 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171440601.904:65349): login pid=17522 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171440601.906:65350): user pid=17523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171440601.906:65351): login pid=17523 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171440601.908:65352): user pid=17522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171440601.908:65353): user pid=17522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171440601.912:65354): user pid=17523 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171440601.912:65355): user pid=17523 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171440601.927:65356): user pid=17522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171440601.927:65357): user pid=17522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171440901.254:65358): user pid=17558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171440901.254:65359): login pid=17558 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171440901.258:65360): user pid=17558 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171440901.258:65361): user pid=17558 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171441201.577:65362): user pid=17593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171441201.577:65363): login pid=17593 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171441201.578:65364): user pid=17594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171441201.578:65365): login pid=17594 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171441201.583:65366): user pid=17593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171441201.583:65367): user pid=17593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171441201.588:65368): user pid=17594 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171441201.588:65369): user pid=17594 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171441201.603:65370): user pid=17593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171441201.603:65371): user pid=17593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171441326.719:65372): avc: denied { search } for pid=17624 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171441326.719:65372): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=17624 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171441326.720:65373): avc: denied { create } for pid=17624 comm="pyzor" name="fJVANO" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171441326.720:65373): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=17624 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171441326.720:65374): avc: denied { getattr } for pid=17624 comm="pyzor" name="fJVANO" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171441326.720:65374): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff366f2e90 a2=7fff366f2e90 a3=2 items=0 ppid=29238 pid=17624 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171441326.720:65374): path="/tmp/fJVANO" >type=AVC msg=audit(1171441326.720:65375): avc: denied { write } for pid=17624 comm="pyzor" name="fJVANO" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171441326.720:65375): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8864 items=0 ppid=29238 pid=17624 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171441326.720:65375): path="/tmp/fJVANO" >type=AVC msg=audit(1171441326.720:65376): avc: denied { unlink } for pid=17624 comm="pyzor" name="fJVANO" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171441326.720:65376): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=17624 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171441326.721:65377): avc: denied { read } for pid=17624 comm="pyzor" name="tmpfBsBLT" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171441326.721:65377): arch=c000003e syscall=0 success=yes exit=9 a0=4 a1=6db010 a2=2000 a3=3 items=0 ppid=29238 pid=17624 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171441326.721:65377): path=2F746D702F746D70664273424C54202864656C6574656429 >type=AVC msg=audit(1171441331.890:65378): avc: denied { append } for pid=17620 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171441331.890:65378): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=17615 pid=17620 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171441501.916:65379): user pid=17643 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171441501.916:65380): login pid=17643 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171441501.920:65381): user pid=17643 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171441501.920:65382): user pid=17643 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171441801.258:65383): user pid=17681 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171441801.258:65384): login pid=17681 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171441801.258:65385): user pid=17680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171441801.258:65386): login pid=17680 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171441801.263:65387): user pid=17681 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171441801.263:65388): user pid=17681 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171441801.269:65389): user pid=17680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171441801.269:65390): user pid=17680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171441801.292:65391): user pid=17680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171441801.293:65392): user pid=17680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171441849.016:65393): avc: denied { getattr } for pid=17704 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171441849.016:65393): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9d4b6460 a2=7fff9d4b6460 a3=6c6280 items=0 ppid=29238 pid=17704 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171441849.016:65393): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171441849.016:65394): avc: denied { read } for pid=17704 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171441849.016:65394): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=17704 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171441849.017:65395): avc: denied { search } for pid=17704 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171441849.017:65395): avc: denied { write } for pid=17704 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171441849.017:65395): avc: denied { add_name } for pid=17704 comm="pyzor" name="-cUmT1" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171441849.017:65395): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=17704 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171441849.017:65396): avc: denied { remove_name } for pid=17704 comm="pyzor" name="-cUmT1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171441849.017:65396): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=17704 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171441853.978:65397): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171441853.978:65397): arch=c000003e syscall=62 success=yes exit=0 a0=4528 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171441854.277:65398): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171441854.277:65398): arch=c000003e syscall=2 success=yes exit=9 a0=3581440 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171441854.335:65399): avc: denied { write } for pid=17700 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171441854.335:65399): avc: denied { add_name } for pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171441854.335:65399): avc: denied { create } for pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171441854.335:65399): arch=c000003e syscall=2 success=yes exit=6 a0=61ca90 a1=c1 a2=124 a3=61ca90 items=0 ppid=17695 pid=17700 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171441854.336:65400): avc: denied { write } for pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171441854.336:65400): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61ca90 items=0 ppid=17695 pid=17700 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171441854.336:65400): path="/home/dhighley/_kUE.-is0FB.douglas" >type=AVC msg=audit(1171441854.336:65401): avc: denied { getattr } for pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171441854.336:65401): arch=c000003e syscall=4 success=yes exit=0 a0=61ca90 a1=7fffb3898290 a2=7fffb3898290 a3=61ca90 items=0 ppid=17695 pid=17700 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171441854.336:65401): path="/home/dhighley/_kUE.-is0FB.douglas" >type=AVC msg=audit(1171441854.336:65402): avc: denied { link } for pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171441854.336:65402): arch=c000003e syscall=86 success=yes exit=0 a0=61ca90 a1=61b520 a2=7fffb38981b0 a3=61ca90 items=0 ppid=17695 pid=17700 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171441854.336:65403): avc: denied { remove_name } for pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171441854.336:65403): avc: denied { unlink } for pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171441854.336:65403): arch=c000003e syscall=87 success=yes exit=0 a0=61ca90 a1=61b520 a2=7fffb38981b0 a3=61ca90 items=0 ppid=17695 pid=17700 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171442101.596:65404): user pid=17727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171442101.597:65405): login pid=17727 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171442101.600:65406): user pid=17727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171442101.600:65407): user pid=17727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171442401.920:65408): user pid=17767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171442401.921:65409): login pid=17767 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171442401.921:65410): user pid=17766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171442401.921:65411): login pid=17766 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171442401.925:65412): user pid=17766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171442401.926:65413): user pid=17766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171442401.926:65414): user pid=17767 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171442401.927:65415): user pid=17767 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171442401.948:65416): user pid=17766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171442401.948:65417): user pid=17766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171442701.256:65418): user pid=17805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171442701.256:65419): login pid=17805 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171442701.259:65420): user pid=17805 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171442701.259:65421): user pid=17805 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171442866.439:65422): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171442866.439:65422): arch=c000003e syscall=2 success=yes exit=12 a0=34a1a90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171442866.439:65423): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171442866.439:65423): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171442866.439:65423): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171442866.447:65424): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171442866.447:65424): arch=c000003e syscall=2 success=yes exit=9 a0=2fc41f0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171442872.096:65425): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171442872.096:65425): arch=c000003e syscall=86 success=yes exit=0 a0=3311340 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171442872.097:65426): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171442872.097:65426): arch=c000003e syscall=87 success=yes exit=0 a0=3311340 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171443001.579:65427): user pid=17863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171443001.579:65428): login pid=17863 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171443001.581:65429): user pid=17864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171443001.582:65430): login pid=17864 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171443001.583:65431): user pid=17863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171443001.584:65432): user pid=17863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171443001.595:65433): user pid=17864 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171443001.595:65434): user pid=17864 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171443001.604:65435): user pid=17863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171443001.605:65436): user pid=17863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171443301.930:65437): user pid=17905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171443301.930:65438): login pid=17905 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171443301.934:65439): user pid=17905 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171443301.934:65440): user pid=17905 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171443393.719:65441): avc: denied { search } for pid=17934 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171443393.719:65441): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=17934 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171443601.267:65442): user pid=17953 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171443601.268:65443): login pid=17953 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171443601.269:65444): user pid=17954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171443601.270:65445): login pid=17954 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171443601.270:65446): user pid=17953 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171443601.270:65447): user pid=17953 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171443601.274:65448): user pid=17954 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171443601.274:65449): user pid=17954 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171443601.293:65450): user pid=17953 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171443601.293:65451): user pid=17953 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171443661.609:65452): user pid=17973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171443661.609:65453): login pid=17973 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171443661.612:65454): user pid=17973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171443661.612:65455): user pid=17973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171443662.520:65456): user pid=17973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171443662.520:65457): user pid=17973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171443901.531:65458): user pid=18012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171443901.531:65459): login pid=18012 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171443901.536:65460): user pid=18012 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171443901.536:65461): user pid=18012 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171443948.327:65462): avc: denied { search } for pid=18037 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171443948.327:65462): avc: denied { write } for pid=18037 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171443948.327:65462): avc: denied { add_name } for pid=18037 comm="pyzor" name="6Az_oS" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171443948.327:65462): avc: denied { create } for pid=18037 comm="pyzor" name="6Az_oS" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171443948.327:65462): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=18037 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171443948.328:65463): avc: denied { getattr } for pid=18037 comm="pyzor" name="6Az_oS" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171443948.328:65463): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff41fb5dd0 a2=7fff41fb5dd0 a3=3 items=0 ppid=29238 pid=18037 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171443948.328:65463): path="/tmp/6Az_oS" >type=AVC msg=audit(1171443948.328:65464): avc: denied { write } for pid=18037 comm="pyzor" name="6Az_oS" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171443948.328:65464): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=18037 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171443948.328:65464): path="/tmp/6Az_oS" >type=AVC msg=audit(1171443948.328:65465): avc: denied { remove_name } for pid=18037 comm="pyzor" name="6Az_oS" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171443948.328:65465): avc: denied { unlink } for pid=18037 comm="pyzor" name="6Az_oS" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171443948.328:65465): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae710 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=18037 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171443948.330:65466): avc: denied { read } for pid=18037 comm="pyzor" name="tmpZh0Wzc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171443948.330:65466): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=18037 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171443948.330:65466): path=2F746D702F746D705A6830577A63202864656C6574656429 >type=AVC msg=audit(1171443953.325:65467): avc: denied { append } for pid=18032 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171443953.325:65467): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=18027 pid=18032 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171444201.865:65468): user pid=18072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171444201.866:65469): login pid=18072 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171444201.867:65470): user pid=18073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171444201.867:65471): login pid=18073 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171444201.872:65472): user pid=18072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171444201.872:65473): user pid=18072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171444201.875:65474): user pid=18073 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171444201.875:65475): user pid=18073 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171444201.892:65476): user pid=18072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171444201.892:65477): user pid=18072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171444501.212:65478): user pid=18112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171444501.213:65479): login pid=18112 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171444501.215:65480): user pid=18112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171444501.215:65481): user pid=18112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171444801.535:65482): user pid=18149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171444801.536:65483): login pid=18149 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171444801.537:65484): user pid=18150 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171444801.537:65485): login pid=18150 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171444801.539:65486): user pid=18149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171444801.539:65487): user pid=18149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171444801.549:65488): user pid=18150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171444801.549:65489): user pid=18150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171444801.557:65490): user pid=18149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171444801.557:65491): user pid=18149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171445101.879:65492): user pid=18186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171445101.880:65493): login pid=18186 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171445101.882:65494): user pid=18186 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171445101.882:65495): user pid=18186 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171445328.921:65496): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171445328.921:65496): arch=c000003e syscall=2 success=yes exit=9 a0=3675670 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171445329.783:65497): avc: denied { getattr } for pid=18224 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171445329.783:65497): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff68b28ad0 a2=7fff68b28ad0 a3=6c6280 items=0 ppid=29238 pid=18224 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171445329.783:65497): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171445329.783:65498): avc: denied { read } for pid=18224 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171445329.783:65498): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=18224 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171445334.744:65499): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171445334.744:65499): arch=c000003e syscall=62 success=yes exit=0 a0=4730 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171445336.126:65500): avc: denied { ioctl } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171445336.126:65500): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171445336.126:65500): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.29238" >type=AVC msg=audit(1171445336.126:65501): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171445336.126:65501): arch=c000003e syscall=86 success=yes exit=0 a0=37c77c0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171445336.126:65502): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171445336.126:65502): arch=c000003e syscall=87 success=yes exit=0 a0=37c77c0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171445336.127:65503): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171445336.127:65503): arch=c000003e syscall=2 success=yes exit=9 a0=32ff6c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171445336.139:65504): avc: denied { write } for pid=18219 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171445336.139:65504): avc: denied { add_name } for pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171445336.139:65504): avc: denied { create } for pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171445336.139:65504): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=18214 pid=18219 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171445336.140:65505): avc: denied { write } for pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171445336.140:65505): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=18214 pid=18219 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171445336.140:65505): path="/home/dhighley/_rcE.YZt0FB.douglas" >type=AVC msg=audit(1171445336.140:65506): avc: denied { getattr } for pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171445336.140:65506): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff36f38d10 a2=7fff36f38d10 a3=61b650 items=0 ppid=18214 pid=18219 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171445336.140:65506): path="/home/dhighley/_rcE.YZt0FB.douglas" >type=AVC msg=audit(1171445336.140:65507): avc: denied { link } for pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171445336.140:65507): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=62d580 a2=7fff36f38c30 a3=61b650 items=0 ppid=18214 pid=18219 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171445336.140:65508): avc: denied { remove_name } for pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171445336.140:65508): avc: denied { unlink } for pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171445336.140:65508): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=62d580 a2=7fff36f38c30 a3=61b650 items=0 ppid=18214 pid=18219 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171445401.206:65509): user pid=18231 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171445401.206:65510): login pid=18231 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171445401.208:65511): user pid=18230 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171445401.208:65512): login pid=18230 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171445401.210:65513): user pid=18231 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171445401.210:65514): user pid=18231 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171445401.216:65515): user pid=18230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171445401.217:65516): user pid=18230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171445401.239:65517): user pid=18230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171445401.239:65518): user pid=18230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171445484.069:65519): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171445484.069:65519): arch=c000003e syscall=2 success=yes exit=12 a0=35759d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171445701.534:65520): user pid=18275 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171445701.534:65521): login pid=18275 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171445701.537:65522): user pid=18275 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171445701.537:65523): user pid=18275 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171446001.860:65524): user pid=18332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171446001.860:65525): login pid=18332 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171446001.862:65526): user pid=18333 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171446001.862:65527): login pid=18333 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171446001.864:65528): user pid=18332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171446001.864:65529): user pid=18332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171446001.869:65530): user pid=18333 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171446001.869:65531): user pid=18333 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171446001.886:65532): user pid=18332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171446001.886:65533): user pid=18332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171446301.211:65534): user pid=18375 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171446301.211:65535): login pid=18375 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171446301.215:65536): user pid=18375 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171446301.215:65537): user pid=18375 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171446465.897:65538): avc: denied { create } for pid=18410 comm="pyzor" name="WFAuAc" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171446465.897:65538): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=18410 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171446465.897:65539): avc: denied { getattr } for pid=18410 comm="pyzor" name="WFAuAc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171446465.897:65539): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffadc10200 a2=7fffadc10200 a3=3 items=0 ppid=29238 pid=18410 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171446465.897:65539): path="/tmp/WFAuAc" >type=AVC msg=audit(1171446465.897:65540): avc: denied { write } for pid=18410 comm="pyzor" name="WFAuAc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171446465.897:65540): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=18410 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171446465.897:65540): path="/tmp/WFAuAc" >type=AVC msg=audit(1171446465.898:65541): avc: denied { unlink } for pid=18410 comm="pyzor" name="WFAuAc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171446465.898:65541): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=18410 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171446465.899:65542): avc: denied { read } for pid=18410 comm="pyzor" name="tmpJEBvgV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171446465.899:65542): arch=c000003e syscall=0 success=yes exit=477 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d88f4 items=0 ppid=29238 pid=18410 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171446465.899:65542): path=2F746D702F746D704A4542766756202864656C6574656429 >type=USER_ACCT msg=audit(1171446601.534:65543): user pid=18425 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171446601.534:65544): login pid=18425 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171446601.537:65545): user pid=18426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171446601.537:65546): user pid=18425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171446601.537:65547): login pid=18426 uid=0 old auid=4294967295 new auid=111 >type=CRED_ACQ msg=audit(1171446601.537:65548): user pid=18425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171446601.548:65549): user pid=18426 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171446601.548:65550): user pid=18426 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171446601.556:65551): user pid=18425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171446601.557:65552): user pid=18425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171446857.005:65553): avc: denied { append } for pid=18468 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171446857.005:65553): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=18463 pid=18468 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171446901.870:65554): user pid=18477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171446901.870:65555): login pid=18477 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171446901.873:65556): user pid=18477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171446901.873:65557): user pid=18477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171447201.215:65558): user pid=18514 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171447201.216:65559): login pid=18514 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171447201.217:65560): user pid=18515 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171447201.218:65561): login pid=18515 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171447201.218:65562): user pid=18514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171447201.218:65563): user pid=18514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171447201.231:65564): user pid=18515 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171447201.231:65565): user pid=18515 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171447201.237:65566): user pid=18514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171447201.237:65567): user pid=18514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171447261.555:65568): user pid=18530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171447261.556:65569): login pid=18530 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171447261.559:65570): user pid=18530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171447261.559:65571): user pid=18530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171447262.474:65572): user pid=18530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171447262.474:65573): user pid=18530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171447501.482:65574): user pid=18569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171447501.482:65575): login pid=18569 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171447501.486:65576): user pid=18569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171447501.486:65577): user pid=18569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171447801.804:65578): user pid=18604 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171447801.804:65579): login pid=18604 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171447801.807:65580): user pid=18605 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171447801.807:65581): login pid=18605 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171447801.810:65582): user pid=18604 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171447801.810:65583): user pid=18604 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171447801.812:65584): user pid=18605 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171447801.812:65585): user pid=18605 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171447801.839:65586): user pid=18604 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171447801.839:65587): user pid=18604 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171447989.958:65588): user pid=17412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171447989.959:65589): user pid=17412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171448101.963:65590): user pid=18649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171448101.964:65591): login pid=18649 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171448101.967:65592): user pid=18649 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171448101.967:65593): user pid=18649 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171448198.327:65594): avc: denied { search } for pid=18675 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171448198.327:65594): avc: denied { write } for pid=18675 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171448198.327:65594): avc: denied { add_name } for pid=18675 comm="pyzor" name="AFjTw8" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171448198.327:65594): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=18675 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171448198.327:65595): avc: denied { remove_name } for pid=18675 comm="pyzor" name="AFjTw8" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171448198.327:65595): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=18675 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171448203.288:65596): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171448203.288:65596): arch=c000003e syscall=62 success=yes exit=0 a0=48f3 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171448203.313:65597): avc: denied { write } for pid=18671 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171448203.313:65597): avc: denied { add_name } for pid=18671 comm="procmail" name="_vjE.LGu0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171448203.313:65597): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=18666 pid=18671 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171448203.314:65598): avc: denied { remove_name } for pid=18671 comm="procmail" name="_vjE.LGu0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171448203.314:65598): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61d600 a2=7fff1662cf50 a3=61b650 items=0 ppid=18666 pid=18671 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171448401.288:65599): user pid=18692 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171448401.288:65600): login pid=18692 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171448401.290:65601): user pid=18693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171448401.290:65602): login pid=18693 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171448401.292:65603): user pid=18692 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171448401.292:65604): user pid=18692 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171448401.302:65605): user pid=18693 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171448401.302:65606): user pid=18693 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171448401.318:65607): user pid=18692 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171448401.318:65608): user pid=18692 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171448701.625:65609): user pid=18730 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171448701.626:65610): login pid=18730 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171448701.628:65611): user pid=18730 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171448701.628:65612): user pid=18730 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171449001.949:65613): user pid=18766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171449001.950:65614): login pid=18766 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171449001.952:65615): user pid=18767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171449001.952:65616): login pid=18767 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171449001.956:65617): user pid=18766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171449001.956:65618): user pid=18766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171449001.961:65619): user pid=18767 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171449001.961:65620): user pid=18767 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171449001.979:65621): user pid=18766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171449001.980:65622): user pid=18766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171449301.291:65623): user pid=18803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171449301.291:65624): login pid=18803 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171449301.295:65625): user pid=18803 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171449301.295:65626): user pid=18803 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171449330.899:65627): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171449330.899:65627): arch=c000003e syscall=2 success=yes exit=12 a0=20ec470 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171449330.899:65628): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171449330.899:65628): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171449330.899:65628): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171449330.907:65629): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171449330.907:65629): arch=c000003e syscall=2 success=yes exit=9 a0=377d840 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171449331.637:65630): avc: denied { getattr } for pid=18825 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171449331.637:65630): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb85e0580 a2=7fffb85e0580 a3=6c6280 items=0 ppid=29238 pid=18825 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171449331.637:65630): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171449331.637:65631): avc: denied { read } for pid=18825 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171449331.637:65631): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=18825 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171449336.612:65632): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171449336.612:65632): arch=c000003e syscall=86 success=yes exit=0 a0=3250f40 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171449336.612:65633): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171449336.612:65633): arch=c000003e syscall=87 success=yes exit=0 a0=3250f40 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171449336.613:65634): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171449336.613:65634): arch=c000003e syscall=2 success=yes exit=9 a0=329be20 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171449601.623:65635): user pid=18846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171449601.623:65636): login pid=18846 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171449601.624:65637): user pid=18847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171449601.625:65638): login pid=18847 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171449601.626:65639): user pid=18846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171449601.626:65640): user pid=18846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171449601.639:65641): user pid=18847 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171449601.639:65642): user pid=18847 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171449601.646:65643): user pid=18846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171449601.647:65644): user pid=18846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171449901.974:65645): user pid=18884 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171449901.974:65646): login pid=18884 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171449901.977:65647): user pid=18884 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171449901.977:65648): user pid=18884 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171449983.672:65649): avc: denied { search } for pid=18911 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171449983.672:65649): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=18911 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171449983.673:65650): avc: denied { create } for pid=18911 comm="pyzor" name="YjiiOK" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171449983.673:65650): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=18911 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171449983.673:65651): avc: denied { getattr } for pid=18911 comm="pyzor" name="YjiiOK" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171449983.673:65651): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff58988230 a2=7fff58988230 a3=2 items=0 ppid=29238 pid=18911 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171449983.673:65651): path="/tmp/YjiiOK" >type=AVC msg=audit(1171449983.673:65652): avc: denied { write } for pid=18911 comm="pyzor" name="YjiiOK" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171449983.673:65652): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8864 items=0 ppid=29238 pid=18911 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171449983.673:65652): path="/tmp/YjiiOK" >type=AVC msg=audit(1171449983.673:65653): avc: denied { unlink } for pid=18911 comm="pyzor" name="YjiiOK" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171449983.673:65653): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=18911 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171449983.674:65654): avc: denied { read } for pid=18911 comm="pyzor" name="tmpLqwuHQ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171449983.674:65654): arch=c000003e syscall=0 success=yes exit=524 a0=4 a1=2aaaaf34d000 a2=1000 a3=b1 items=0 ppid=29238 pid=18911 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171449983.674:65654): path=2F746D702F746D704C7177754851202864656C6574656429 >type=AVC msg=audit(1171449988.660:65655): avc: denied { append } for pid=18907 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171449988.660:65655): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=18902 pid=18907 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171450201.296:65656): user pid=18939 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171450201.297:65657): login pid=18939 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171450201.299:65658): user pid=18940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171450201.299:65659): login pid=18940 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171450201.302:65660): user pid=18939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171450201.302:65661): user pid=18939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171450201.304:65662): user pid=18940 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171450201.304:65663): user pid=18940 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171450201.324:65664): user pid=18939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171450201.324:65665): user pid=18939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171450501.631:65666): user pid=18982 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171450501.632:65667): login pid=18982 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171450501.635:65668): user pid=18982 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171450501.635:65669): user pid=18982 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171450801.960:65670): user pid=19020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171450801.960:65671): login pid=19020 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171450801.962:65672): user pid=19019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171450801.962:65673): login pid=19019 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171450801.963:65674): user pid=19021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171450801.963:65675): login pid=19021 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171450801.966:65676): user pid=19020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171450801.966:65677): user pid=19020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171450801.969:65678): user pid=19019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171450801.969:65679): user pid=19019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171450801.977:65680): user pid=19021 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171450801.977:65681): user pid=19021 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171450801.995:65682): user pid=19019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171450801.995:65683): user pid=19019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171450861.316:65684): user pid=19040 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171450861.316:65685): login pid=19040 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171450861.320:65686): user pid=19040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171450861.321:65687): user pid=19040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171450862.232:65688): user pid=19040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171450862.233:65689): user pid=19040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171451101.240:65690): user pid=19082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171451101.241:65691): login pid=19082 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171451101.245:65692): user pid=19082 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171451101.245:65693): user pid=19082 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171451333.235:65694): avc: denied { getattr } for pid=19127 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171451333.235:65694): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff6b4d1470 a2=7fff6b4d1470 a3=6c6280 items=0 ppid=29238 pid=19127 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171451333.235:65694): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171451333.236:65695): avc: denied { read } for pid=19127 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171451333.236:65695): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=19127 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171451333.236:65696): avc: denied { search } for pid=19127 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171451333.236:65696): avc: denied { write } for pid=19127 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171451333.236:65696): avc: denied { add_name } for pid=19127 comm="pyzor" name="Ka9nSG" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171451333.236:65696): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=19127 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171451333.237:65697): avc: denied { remove_name } for pid=19127 comm="pyzor" name="Ka9nSG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171451333.237:65697): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=19127 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171451338.198:65698): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171451338.198:65698): arch=c000003e syscall=62 success=yes exit=0 a0=4ab7 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171451338.892:65699): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171451338.892:65699): arch=c000003e syscall=2 success=yes exit=9 a0=3239970 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171451338.902:65700): avc: denied { write } for pid=19122 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171451338.902:65700): avc: denied { add_name } for pid=19122 comm="procmail" name="_yqE.K3u0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171451338.902:65700): arch=c000003e syscall=2 success=yes exit=6 a0=61b5c0 a1=c1 a2=124 a3=61b5c0 items=0 ppid=19117 pid=19122 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171451338.903:65701): avc: denied { remove_name } for pid=19122 comm="procmail" name="_yqE.K3u0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171451338.903:65701): arch=c000003e syscall=87 success=yes exit=0 a0=61b5c0 a1=61d040 a2=7fffb2646f70 a3=61b5c0 items=0 ppid=19117 pid=19122 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171451401.565:65702): user pid=19133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171451401.565:65703): login pid=19133 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171451401.567:65704): user pid=19134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171451401.568:65705): login pid=19134 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171451401.569:65706): user pid=19133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171451401.570:65707): user pid=19133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171451401.571:65708): user pid=19134 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171451401.572:65709): user pid=19134 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171451401.591:65710): user pid=19133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171451401.592:65711): user pid=19133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171451701.906:65712): user pid=19172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171451701.906:65713): login pid=19172 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171451701.910:65714): user pid=19172 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171451701.910:65715): user pid=19172 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171452001.232:65716): user pid=19205 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171452001.232:65717): login pid=19205 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171452001.234:65718): user pid=19206 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171452001.234:65719): login pid=19206 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171452001.236:65720): user pid=19205 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171452001.236:65721): user pid=19205 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171452001.248:65722): user pid=19206 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171452001.249:65723): user pid=19206 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171452001.255:65724): user pid=19205 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171452001.256:65725): user pid=19205 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171452160.370:65726): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171452160.370:65726): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171452160.370:65726): path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.29238" >type=AVC msg=audit(1171452160.371:65727): avc: denied { link } for pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171452160.371:65727): arch=c000003e syscall=86 success=yes exit=0 a0=32bdc20 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171452160.371:65728): avc: denied { unlink } for pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171452160.371:65728): arch=c000003e syscall=87 success=yes exit=0 a0=32bdc20 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171452160.373:65729): avc: denied { setattr } for pid=29238 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171452160.373:65729): arch=c000003e syscall=132 success=yes exit=0 a0=31ab3a0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171452160.373:65730): avc: denied { rename } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171452160.373:65730): arch=c000003e syscall=82 success=yes exit=0 a0=361e830 a1=3103ab0 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171452160.705:65731): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171452160.705:65731): arch=c000003e syscall=1 success=yes exit=3216 a0=9 a1=36009d0 a2=c90 a3=11 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171452160.705:65731): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171452160.715:65732): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171452160.715:65732): arch=c000003e syscall=2 success=yes exit=9 a0=38e1690 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171452166.636:65733): avc: denied { create } for pid=19235 comm="procmail" name="_jsE.GEv0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171452166.636:65733): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=19230 pid=19235 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171452166.636:65734): avc: denied { write } for pid=19235 comm="procmail" name="_jsE.GEv0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171452166.636:65734): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=19230 pid=19235 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171452166.636:65734): path="/home/dhighley/_jsE.GEv0FB.douglas" >type=AVC msg=audit(1171452166.637:65735): avc: denied { getattr } for pid=19235 comm="procmail" name="_jsE.GEv0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171452166.637:65735): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fffb25f1ff0 a2=7fffb25f1ff0 a3=61b650 items=0 ppid=19230 pid=19235 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171452166.637:65735): path="/home/dhighley/_jsE.GEv0FB.douglas" >type=AVC msg=audit(1171452166.637:65736): avc: denied { link } for pid=19235 comm="procmail" name="_jsE.GEv0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171452166.637:65736): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61dff0 a2=7fffb25f1f10 a3=61b650 items=0 ppid=19230 pid=19235 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171452166.637:65737): avc: denied { unlink } for pid=19235 comm="procmail" name="_jsE.GEv0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171452166.637:65737): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61dff0 a2=7fffb25f1f10 a3=61b650 items=0 ppid=19230 pid=19235 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171452301.572:65738): user pid=19253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171452301.572:65739): login pid=19253 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171452301.575:65740): user pid=19253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171452301.575:65741): user pid=19253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171452601.894:65742): user pid=19289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171452601.894:65743): login pid=19289 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171452601.896:65744): user pid=19290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171452601.897:65745): login pid=19290 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171452601.900:65746): user pid=19289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171452601.900:65747): user pid=19289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171452601.902:65748): user pid=19290 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171452601.902:65749): user pid=19290 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171452601.925:65750): user pid=19289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171452601.925:65751): user pid=19289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171452901.239:65752): user pid=19326 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171452901.240:65753): login pid=19326 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171452901.243:65754): user pid=19326 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171452901.243:65755): user pid=19326 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171453201.573:65756): user pid=19362 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171453201.573:65757): login pid=19362 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171453201.575:65758): user pid=19363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171453201.576:65759): login pid=19363 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171453201.577:65760): user pid=19362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171453201.577:65761): user pid=19362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171453201.579:65762): user pid=19363 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171453201.580:65763): user pid=19363 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171453201.596:65764): user pid=19362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171453201.596:65765): user pid=19362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171453501.912:65766): user pid=19399 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171453501.912:65767): login pid=19399 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171453501.915:65768): user pid=19399 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171453501.915:65769): user pid=19399 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171453801.249:65770): user pid=19436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171453801.249:65771): login pid=19436 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171453801.249:65772): user pid=19435 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171453801.249:65773): login pid=19435 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171453801.252:65774): user pid=19435 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171453801.252:65775): user pid=19435 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171453801.255:65776): user pid=19436 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171453801.255:65777): user pid=19436 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171453801.271:65778): user pid=19435 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171453801.271:65779): user pid=19435 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171453989.626:65780): avc: denied { search } for pid=19471 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171453989.626:65780): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=19471 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171453989.627:65781): avc: denied { create } for pid=19471 comm="pyzor" name="SJDu0N" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171453989.627:65781): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=19471 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171453989.627:65782): avc: denied { getattr } for pid=19471 comm="pyzor" name="SJDu0N" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171453989.627:65782): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb84308d0 a2=7fffb84308d0 a3=3 items=0 ppid=29238 pid=19471 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171453989.627:65782): path="/tmp/SJDu0N" >type=AVC msg=audit(1171453989.628:65783): avc: denied { write } for pid=19471 comm="pyzor" name="SJDu0N" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171453989.628:65783): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=19471 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171453989.628:65783): path="/tmp/SJDu0N" >type=AVC msg=audit(1171453989.628:65784): avc: denied { unlink } for pid=19471 comm="pyzor" name="SJDu0N" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171453989.628:65784): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=19471 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171453989.629:65785): avc: denied { read } for pid=19471 comm="pyzor" name="tmpznoCgu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171453989.629:65785): arch=c000003e syscall=0 success=yes exit=75 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=19471 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171453989.629:65785): path=2F746D702F746D707A6E6F436775202864656C6574656429 >type=AVC msg=audit(1171453996.670:65786): avc: denied { append } for pid=19467 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171453996.670:65786): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=19462 pid=19467 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171454101.586:65787): user pid=19491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171454101.586:65788): login pid=19491 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171454101.590:65789): user pid=19491 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171454101.590:65790): user pid=19491 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171454401.915:65791): user pid=19527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171454401.915:65792): login pid=19527 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171454401.916:65793): user pid=19528 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171454401.917:65794): login pid=19528 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171454401.921:65795): user pid=19527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171454401.921:65796): user pid=19527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171454401.924:65797): user pid=19528 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171454401.924:65798): user pid=19528 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171454401.944:65799): user pid=19527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171454401.944:65800): user pid=19527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171454461.246:65801): user pid=19543 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171454461.246:65802): login pid=19543 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171454461.249:65803): user pid=19543 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171454461.249:65804): user pid=19543 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171454462.132:65805): user pid=19543 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171454462.133:65806): user pid=19543 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171454521.137:65807): user pid=19563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171454521.137:65808): login pid=19563 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171454521.140:65809): user pid=19563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171454521.140:65810): user pid=19563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171454701.143:65811): user pid=19593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171454701.143:65812): login pid=19593 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171454701.146:65813): user pid=19593 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171454701.146:65814): user pid=19593 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171455001.467:65815): user pid=19631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171455001.467:65816): login pid=19631 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171455001.470:65817): user pid=19632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171455001.470:65819): login pid=19632 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171455001.470:65818): user pid=19631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171455001.470:65820): user pid=19631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171455001.482:65821): user pid=19632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171455001.482:65822): user pid=19632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171455001.488:65823): user pid=19631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171455001.488:65824): user pid=19631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171455301.807:65825): user pid=19670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171455301.807:65826): login pid=19670 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171455301.810:65827): user pid=19670 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171455301.810:65828): user pid=19670 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171455601.137:65829): user pid=19703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171455601.138:65830): login pid=19703 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171455601.140:65831): user pid=19704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171455601.140:65832): login pid=19704 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171455601.141:65833): user pid=19703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171455601.142:65834): user pid=19703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171455601.146:65835): user pid=19704 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171455601.146:65836): user pid=19704 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171455601.162:65837): user pid=19703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171455601.162:65838): user pid=19703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171455901.480:65839): user pid=19745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171455901.480:65840): login pid=19745 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171455901.484:65841): user pid=19745 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171455901.484:65842): user pid=19745 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171456201.801:65843): user pid=19780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171456201.801:65844): login pid=19780 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171456201.803:65845): user pid=19781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171456201.804:65846): login pid=19781 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171456201.807:65847): user pid=19780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171456201.807:65848): user pid=19780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171456201.809:65849): user pid=19781 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171456201.809:65850): user pid=19781 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171456201.827:65851): user pid=19780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171456201.827:65852): user pid=19780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171456501.139:65853): user pid=19817 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171456501.139:65854): login pid=19817 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171456501.143:65855): user pid=19817 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171456501.143:65856): user pid=19817 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171456540.636:65857): avc: denied { search } for pid=19838 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171456540.636:65857): avc: denied { write } for pid=19838 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171456540.636:65857): avc: denied { add_name } for pid=19838 comm="pyzor" name="iFzAis" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171456540.636:65857): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=19838 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171456540.636:65858): avc: denied { remove_name } for pid=19838 comm="pyzor" name="iFzAis" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171456540.636:65858): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=19838 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171456545.597:65859): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171456545.597:65859): arch=c000003e syscall=62 success=yes exit=0 a0=4d7e a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171456547.916:65860): avc: denied { write } for pid=19834 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171456547.916:65860): avc: denied { add_name } for pid=19834 comm="procmail" name="_61E.jIw0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171456547.916:65860): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=19829 pid=19834 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171456547.916:65861): avc: denied { remove_name } for pid=19834 comm="procmail" name="_61E.jIw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171456547.916:65861): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e070 a2=7fff1a4b2dd0 a3=61b650 items=0 ppid=19829 pid=19834 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171456594.573:65862): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171456594.573:65862): arch=c000003e syscall=2 success=yes exit=12 a0=3368b00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171456594.574:65863): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171456594.574:65863): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171456594.574:65863): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171456594.590:65864): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171456594.590:65864): arch=c000003e syscall=2 success=yes exit=9 a0=31f7a50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171456599.638:65865): avc: denied { getattr } for pid=19852 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171456599.638:65865): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff125b1560 a2=7fff125b1560 a3=6c6280 items=0 ppid=29238 pid=19852 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171456599.638:65865): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171456599.638:65866): avc: denied { read } for pid=19852 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171456599.638:65866): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=19852 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171456604.718:65867): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171456604.718:65867): arch=c000003e syscall=86 success=yes exit=0 a0=3266f80 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171456604.718:65868): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171456604.718:65868): arch=c000003e syscall=87 success=yes exit=0 a0=3266f80 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171456604.719:65869): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171456604.719:65869): arch=c000003e syscall=2 success=yes exit=10 a0=33261a0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171456604.730:65870): avc: denied { create } for pid=19848 comm="procmail" name="_I2E.cJw0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171456604.730:65870): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=19845 pid=19848 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171456604.730:65871): avc: denied { write } for pid=19848 comm="procmail" name="_I2E.cJw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171456604.730:65871): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=19845 pid=19848 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171456604.730:65871): path="/home/dhighley/_I2E.cJw0FB.douglas" >type=AVC msg=audit(1171456604.731:65872): avc: denied { getattr } for pid=19848 comm="procmail" name="_I2E.cJw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171456604.731:65872): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff3c575f60 a2=7fff3c575f60 a3=61b650 items=0 ppid=19845 pid=19848 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171456604.731:65872): path="/home/dhighley/_I2E.cJw0FB.douglas" >type=AVC msg=audit(1171456604.731:65873): avc: denied { link } for pid=19848 comm="procmail" name="_I2E.cJw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171456604.731:65873): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61eb20 a2=7fff3c575e80 a3=61b650 items=0 ppid=19845 pid=19848 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171456604.731:65874): avc: denied { unlink } for pid=19848 comm="procmail" name="_I2E.cJw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171456604.731:65874): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61eb20 a2=7fff3c575e80 a3=61b650 items=0 ppid=19845 pid=19848 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171456801.462:65875): user pid=19884 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171456801.462:65876): login pid=19884 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171456801.465:65877): user pid=19885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171456801.465:65878): login pid=19885 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171456801.466:65879): user pid=19884 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171456801.466:65880): user pid=19884 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171456801.468:65881): user pid=19885 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171456801.468:65882): user pid=19885 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171456801.496:65883): user pid=19884 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171456801.497:65884): user pid=19884 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171457101.792:65885): user pid=19922 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171457101.793:65886): login pid=19922 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171457101.795:65887): user pid=19922 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171457101.796:65888): user pid=19922 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171457401.124:65889): user pid=19969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171457401.124:65890): login pid=19969 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171457401.126:65891): user pid=19970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171457401.127:65892): login pid=19970 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171457401.128:65893): user pid=19969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171457401.128:65894): user pid=19969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171457401.133:65895): user pid=19970 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171457401.134:65896): user pid=19970 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171457401.149:65897): user pid=19969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171457401.149:65898): user pid=19969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171457701.459:65899): user pid=20025 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171457701.460:65900): login pid=20025 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171457701.463:65901): user pid=20025 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171457701.463:65902): user pid=20025 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171457951.657:65903): user pid=19563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171457951.658:65904): user pid=19563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171458001.663:65905): user pid=21009 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171458001.663:65906): login pid=21009 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171458001.665:65907): user pid=21010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171458001.666:65908): login pid=21010 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171458001.669:65909): user pid=21009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171458001.669:65910): user pid=21009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171458001.672:65911): user pid=21010 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171458001.672:65912): user pid=21010 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171458001.702:65913): user pid=21009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171458001.702:65914): user pid=21009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171458061.997:65915): user pid=21027 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171458061.997:65916): login pid=21027 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171458062.001:65917): user pid=21027 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171458062.002:65918): user pid=21027 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171458062.885:65919): user pid=21027 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171458062.885:65920): user pid=21027 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171458301.892:65921): user pid=21065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171458301.892:65922): login pid=21065 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171458301.896:65923): user pid=21065 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171458301.896:65924): user pid=21065 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171458525.397:65925): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171458525.397:65925): arch=c000003e syscall=2 success=yes exit=12 a0=3335cc0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171458525.397:65926): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171458525.397:65926): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171458525.397:65926): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171458525.409:65927): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171458525.409:65927): arch=c000003e syscall=2 success=yes exit=9 a0=3850860 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171458530.457:65928): avc: denied { search } for pid=21109 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171458530.457:65928): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171458530.457:65929): avc: denied { getattr } for pid=21109 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171458530.457:65929): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffcfdc1d60 a2=7fffcfdc1d60 a3=6c6280 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171458530.457:65929): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171458530.457:65930): avc: denied { read } for pid=21109 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171458530.457:65930): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171458530.458:65931): avc: denied { search } for pid=21109 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171458530.458:65931): avc: denied { write } for pid=21109 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171458530.458:65931): avc: denied { add_name } for pid=21109 comm="pyzor" name="bcbSDc" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171458530.458:65931): avc: denied { create } for pid=21109 comm="pyzor" name="bcbSDc" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171458530.458:65931): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171458530.459:65932): avc: denied { getattr } for pid=21109 comm="pyzor" name="bcbSDc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171458530.459:65932): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcfdbfbd0 a2=7fffcfdbfbd0 a3=3 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171458530.459:65932): path="/tmp/bcbSDc" >type=AVC msg=audit(1171458530.459:65933): avc: denied { write } for pid=21109 comm="pyzor" name="bcbSDc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171458530.459:65933): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171458530.459:65933): path="/tmp/bcbSDc" >type=AVC msg=audit(1171458530.459:65934): avc: denied { remove_name } for pid=21109 comm="pyzor" name="bcbSDc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171458530.459:65934): avc: denied { unlink } for pid=21109 comm="pyzor" name="bcbSDc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171458530.459:65934): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171458530.460:65935): avc: denied { read } for pid=21109 comm="pyzor" name="tmpVm7ZwH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171458530.460:65935): arch=c000003e syscall=0 success=yes exit=2571 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171458530.460:65935): path=2F746D702F746D70566D375A7748202864656C6574656429 >type=AVC msg=audit(1171458535.418:65936): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171458535.418:65936): arch=c000003e syscall=62 success=yes exit=0 a0=5275 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171458535.429:65937): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171458535.429:65937): arch=c000003e syscall=86 success=yes exit=0 a0=31ef3f0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171458535.429:65938): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171458535.429:65938): arch=c000003e syscall=87 success=yes exit=0 a0=31ef3f0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171458535.430:65939): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171458535.430:65939): arch=c000003e syscall=2 success=yes exit=10 a0=3201450 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171458535.445:65940): avc: denied { write } for pid=21105 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171458535.445:65940): avc: denied { add_name } for pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171458535.445:65940): avc: denied { create } for pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171458535.445:65940): arch=c000003e syscall=2 success=yes exit=6 a0=61fc50 a1=c1 a2=124 a3=61fc50 items=0 ppid=21100 pid=21105 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171458535.446:65941): avc: denied { write } for pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171458535.446:65941): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61fc50 items=0 ppid=21100 pid=21105 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171458535.446:65941): path="/home/dhighley/_xJF.nnw0FB.douglas" >type=AVC msg=audit(1171458535.446:65942): avc: denied { getattr } for pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171458535.446:65942): arch=c000003e syscall=4 success=yes exit=0 a0=61fc50 a1=7fff53a8a480 a2=7fff53a8a480 a3=61fc50 items=0 ppid=21100 pid=21105 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171458535.446:65942): path="/home/dhighley/_xJF.nnw0FB.douglas" >type=AVC msg=audit(1171458535.446:65943): avc: denied { link } for pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171458535.446:65943): arch=c000003e syscall=86 success=yes exit=0 a0=61fc50 a1=61fc30 a2=7fff53a8a3a0 a3=61fc50 items=0 ppid=21100 pid=21105 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171458535.446:65944): avc: denied { remove_name } for pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171458535.446:65944): avc: denied { unlink } for pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171458535.446:65944): arch=c000003e syscall=87 success=yes exit=0 a0=61fc50 a1=61fc30 a2=7fff53a8a3a0 a3=61fc50 items=0 ppid=21100 pid=21105 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171458535.446:65945): avc: denied { append } for pid=21105 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171458535.446:65945): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=21100 pid=21105 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171458601.219:65946): user pid=21116 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171458601.219:65947): login pid=21116 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171458601.222:65948): user pid=21117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171458601.222:65949): login pid=21117 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171458601.223:65950): user pid=21116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171458601.223:65951): user pid=21116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171458601.233:65952): user pid=21117 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171458601.233:65953): user pid=21117 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171458601.243:65954): user pid=21116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171458601.243:65955): user pid=21116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171458790.170:65956): user pid=19020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171458790.170:65957): user pid=19020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171458901.174:65958): user pid=21159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171458901.175:65959): login pid=21159 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171458901.178:65960): user pid=21159 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171458901.179:65961): user pid=21159 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171459201.506:65962): user pid=21210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171459201.506:65963): user pid=21211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171459201.506:65964): login pid=21210 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171459201.506:65965): login pid=21211 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171459201.512:65966): user pid=21210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171459201.512:65967): user pid=21210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171459201.514:65968): user pid=21211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171459201.514:65969): user pid=21211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171459201.535:65970): user pid=21210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171459201.535:65971): user pid=21210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171459477.288:65972): avc: denied { search } for pid=21256 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171459477.288:65972): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=21256 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171459477.289:65973): avc: denied { create } for pid=21256 comm="pyzor" name="KNiczH" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171459477.289:65973): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=21256 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171459477.289:65974): avc: denied { getattr } for pid=21256 comm="pyzor" name="KNiczH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171459477.289:65974): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb02176b0 a2=7fffb02176b0 a3=3 items=0 ppid=29238 pid=21256 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171459477.289:65974): path="/tmp/KNiczH" >type=AVC msg=audit(1171459477.290:65975): avc: denied { write } for pid=21256 comm="pyzor" name="KNiczH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171459477.290:65975): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=21256 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171459477.290:65975): path="/tmp/KNiczH" >type=AVC msg=audit(1171459477.290:65976): avc: denied { unlink } for pid=21256 comm="pyzor" name="KNiczH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171459477.290:65976): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=21256 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171459477.291:65977): avc: denied { read } for pid=21256 comm="pyzor" name="tmphkrqGt" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171459477.291:65977): arch=c000003e syscall=0 success=yes exit=635 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=21256 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171459477.291:65977): path=2F746D702F746D70686B72714774202864656C6574656429 >type=AVC msg=audit(1171459482.276:65978): avc: denied { append } for pid=21252 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171459482.276:65978): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=21247 pid=21252 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171459501.849:65979): user pid=21260 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171459501.850:65980): login pid=21260 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171459501.852:65981): user pid=21260 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171459501.852:65982): user pid=21260 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171459801.175:65983): user pid=21299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171459801.176:65984): login pid=21299 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171459801.177:65985): user pid=21298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171459801.177:65986): login pid=21298 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171459801.180:65987): user pid=21299 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171459801.180:65988): user pid=21299 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171459801.186:65989): user pid=21298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171459801.186:65990): user pid=21298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171459801.208:65991): user pid=21298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171459801.209:65992): user pid=21298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171460101.516:65993): user pid=21334 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171460101.516:65994): login pid=21334 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171460101.519:65995): user pid=21334 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171460101.519:65996): user pid=21334 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171460401.837:65997): user pid=21368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171460401.837:65998): login pid=21368 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171460401.840:65999): user pid=21369 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171460401.840:66000): login pid=21369 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171460401.843:66001): user pid=21368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171460401.843:66002): user pid=21368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171460401.845:66003): user pid=21369 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171460401.845:66004): user pid=21369 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171460401.864:66005): user pid=21368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171460401.864:66006): user pid=21368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171460478.880:66007): avc: denied { search } for pid=21395 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171460478.880:66007): avc: denied { write } for pid=21395 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171460478.880:66007): avc: denied { add_name } for pid=21395 comm="pyzor" name="MWZ2WV" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171460478.880:66007): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=21395 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171460478.881:66008): avc: denied { remove_name } for pid=21395 comm="pyzor" name="MWZ2WV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171460478.881:66008): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=21395 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171460701.170:66009): user pid=21415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171460701.170:66010): login pid=21415 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171460701.175:66011): user pid=21415 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171460701.175:66012): user pid=21415 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171461001.497:66013): user pid=21449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171461001.497:66014): login pid=21449 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171461001.497:66015): user pid=21450 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171461001.497:66016): login pid=21450 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171461001.503:66017): user pid=21449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171461001.503:66018): user pid=21449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171461001.506:66019): user pid=21450 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171461001.506:66020): user pid=21450 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171461001.524:66021): user pid=21449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171461001.524:66022): user pid=21449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171461250.695:66023): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171461250.695:66023): arch=c000003e syscall=2 success=yes exit=12 a0=302f5e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171461250.696:66024): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171461250.696:66024): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171461250.696:66024): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171461250.703:66025): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171461250.703:66025): arch=c000003e syscall=2 success=yes exit=9 a0=33bdc20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171461254.852:66026): avc: denied { getattr } for pid=21492 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171461254.852:66026): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffd2751700 a2=7fffd2751700 a3=6c6280 items=0 ppid=29238 pid=21492 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171461254.852:66026): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171461254.852:66027): avc: denied { read } for pid=21492 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171461254.852:66027): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=21492 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171461259.813:66028): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171461259.813:66028): arch=c000003e syscall=62 success=yes exit=0 a0=53f4 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171461259.824:66029): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171461259.824:66029): arch=c000003e syscall=86 success=yes exit=0 a0=31ae4d0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171461259.824:66030): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171461259.824:66030): arch=c000003e syscall=87 success=yes exit=0 a0=31ae4d0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171461259.825:66031): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171461259.825:66031): arch=c000003e syscall=2 success=yes exit=9 a0=322ec30 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171461259.836:66032): avc: denied { write } for pid=21488 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171461259.836:66032): avc: denied { add_name } for pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171461259.836:66032): avc: denied { create } for pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171461259.836:66032): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=21483 pid=21488 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171461259.836:66033): avc: denied { write } for pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171461259.836:66033): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=21483 pid=21488 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171461259.836:66033): path="/home/dhighley/_wPF.LSx0FB.douglas" >type=AVC msg=audit(1171461259.836:66034): avc: denied { getattr } for pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171461259.836:66034): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7ffffa65b050 a2=7ffffa65b050 a3=61a500 items=0 ppid=21483 pid=21488 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171461259.836:66034): path="/home/dhighley/_wPF.LSx0FB.douglas" >type=AVC msg=audit(1171461259.837:66035): avc: denied { link } for pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171461259.837:66035): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7ffffa65af70 a3=61a500 items=0 ppid=21483 pid=21488 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171461259.837:66036): avc: denied { remove_name } for pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171461259.837:66036): avc: denied { unlink } for pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171461259.837:66036): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7ffffa65af70 a3=61a500 items=0 ppid=21483 pid=21488 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171461301.846:66037): user pid=21496 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171461301.847:66038): login pid=21496 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171461301.851:66039): user pid=21496 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171461301.851:66040): user pid=21496 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171461601.181:66041): user pid=21539 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171461601.181:66042): login pid=21539 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171461601.183:66043): user pid=21540 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171461601.184:66044): login pid=21540 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171461601.184:66045): user pid=21538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171461601.184:66046): login pid=21538 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171461601.187:66047): user pid=21539 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171461601.188:66048): user pid=21539 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171461601.190:66049): user pid=21538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171461601.191:66050): user pid=21538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171461601.202:66051): user pid=21540 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171461601.202:66052): user pid=21540 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171461601.215:66053): user pid=21538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171461601.215:66054): user pid=21538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171461661.531:66055): user pid=21559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171461661.531:66056): login pid=21559 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171461661.535:66057): user pid=21559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171461661.535:66058): user pid=21559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171461662.417:66059): user pid=21559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171461662.417:66060): user pid=21559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171461901.425:66061): user pid=21607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171461901.426:66062): login pid=21607 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171461901.429:66063): user pid=21607 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171461901.429:66064): user pid=21607 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171462201.757:66065): user pid=21648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171462201.757:66066): login pid=21648 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171462201.759:66067): user pid=21649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171462201.760:66068): login pid=21649 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171462201.763:66069): user pid=21648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171462201.763:66070): user pid=21648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171462201.765:66071): user pid=21649 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171462201.765:66072): user pid=21649 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171462201.784:66073): user pid=21648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171462201.785:66074): user pid=21648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171462384.886:66075): avc: denied { setattr } for pid=29238 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171462384.886:66075): arch=c000003e syscall=132 success=yes exit=0 a0=31ab3a0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171462384.887:66076): avc: denied { rename } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171462384.887:66076): arch=c000003e syscall=82 success=yes exit=0 a0=361e830 a1=3103ab0 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171462395.860:66077): avc: denied { search } for pid=21685 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171462395.860:66077): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=21685 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171462395.861:66078): avc: denied { create } for pid=21685 comm="pyzor" name="S4Gkzs" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171462395.861:66078): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=21685 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171462395.862:66079): avc: denied { getattr } for pid=21685 comm="pyzor" name="S4Gkzs" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171462395.862:66079): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffffce6f710 a2=7ffffce6f710 a3=2 items=0 ppid=29238 pid=21685 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171462395.862:66079): path="/tmp/S4Gkzs" >type=AVC msg=audit(1171462395.862:66080): avc: denied { write } for pid=21685 comm="pyzor" name="S4Gkzs" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171462395.862:66080): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=21685 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171462395.862:66080): path="/tmp/S4Gkzs" >type=AVC msg=audit(1171462395.862:66081): avc: denied { unlink } for pid=21685 comm="pyzor" name="S4Gkzs" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171462395.862:66081): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=21685 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171462395.868:66082): avc: denied { read } for pid=21685 comm="pyzor" name="tmpu-J8wW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171462395.868:66082): arch=c000003e syscall=0 success=yes exit=3615 a0=4 a1=2aaaaf34d000 a2=1000 a3=2dd items=0 ppid=29238 pid=21685 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171462395.868:66082): path=2F746D702F746D70752D4A387757202864656C6574656429 >type=USER_ACCT msg=audit(1171462501.092:66083): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171462501.092:66084): login pid=21696 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171462501.097:66085): user pid=21696 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171462501.097:66086): user pid=21696 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171462801.422:66087): user pid=21733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171462801.422:66088): login pid=21733 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171462801.422:66089): user pid=21732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171462801.422:66090): login pid=21732 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171462801.427:66091): user pid=21733 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171462801.428:66092): user pid=21733 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171462801.432:66093): user pid=21732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171462801.432:66094): user pid=21732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171462801.457:66095): user pid=21732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171462801.457:66096): user pid=21732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171463101.753:66097): user pid=21769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171463101.753:66098): login pid=21769 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171463101.755:66099): user pid=21769 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171463101.756:66100): user pid=21769 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171463401.080:66101): user pid=21803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171463401.080:66102): login pid=21803 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171463401.083:66103): user pid=21804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171463401.083:66104): login pid=21804 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171463401.084:66105): user pid=21803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171463401.084:66106): user pid=21803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171463401.086:66107): user pid=21804 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171463401.086:66108): user pid=21804 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171463401.114:66109): user pid=21803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171463401.114:66110): user pid=21803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171463663.016:66111): avc: denied { search } for pid=21848 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171463663.016:66111): avc: denied { write } for pid=21848 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171463663.016:66111): avc: denied { add_name } for pid=21848 comm="pyzor" name="TgZ9DV" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171463663.016:66111): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=21848 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171463663.017:66112): avc: denied { remove_name } for pid=21848 comm="pyzor" name="TgZ9DV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171463663.017:66112): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=21848 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171463668.004:66113): avc: denied { write } for pid=21844 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171463668.004:66113): avc: denied { add_name } for pid=21844 comm="procmail" name="_UVF.03x0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171463668.004:66113): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=21839 pid=21844 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171463668.005:66114): avc: denied { remove_name } for pid=21844 comm="procmail" name="_UVF.03x0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171463668.005:66114): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff35db76d0 a3=61a500 items=0 ppid=21839 pid=21844 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171463668.005:66115): avc: denied { append } for pid=21844 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171463668.005:66115): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=21839 pid=21844 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171463701.426:66116): user pid=21852 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171463701.427:66117): login pid=21852 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171463701.431:66118): user pid=21852 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171463701.431:66119): user pid=21852 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171463842.067:66120): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171463842.067:66120): arch=c000003e syscall=2 success=yes exit=12 a0=35b58a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171463842.067:66121): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171463842.067:66121): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171463842.067:66121): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171463842.075:66122): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171463842.075:66122): arch=c000003e syscall=2 success=yes exit=9 a0=321a2d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171463845.868:66123): avc: denied { getattr } for pid=21881 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171463845.868:66123): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff72d679e0 a2=7fff72d679e0 a3=6c6280 items=0 ppid=29238 pid=21881 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171463845.868:66123): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171463845.869:66124): avc: denied { read } for pid=21881 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171463845.869:66124): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=21881 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171463850.831:66125): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171463850.831:66125): arch=c000003e syscall=62 success=yes exit=0 a0=5579 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171463850.848:66126): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171463850.848:66126): arch=c000003e syscall=86 success=yes exit=0 a0=35f5a60 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171463850.848:66127): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171463850.848:66127): arch=c000003e syscall=87 success=yes exit=0 a0=35f5a60 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171463850.849:66128): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171463850.849:66128): arch=c000003e syscall=2 success=yes exit=9 a0=32890a0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171463850.933:66129): avc: denied { create } for pid=21876 comm="procmail" name="_0VF.q6x0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171463850.933:66129): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=21873 pid=21876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171463850.934:66130): avc: denied { write } for pid=21876 comm="procmail" name="_0VF.q6x0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171463850.934:66130): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=21873 pid=21876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171463850.934:66130): path="/home/dhighley/_0VF.q6x0FB.douglas" >type=AVC msg=audit(1171463850.934:66131): avc: denied { getattr } for pid=21876 comm="procmail" name="_0VF.q6x0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171463850.934:66131): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff1b5b2fa0 a2=7fff1b5b2fa0 a3=61b650 items=0 ppid=21873 pid=21876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171463850.934:66131): path="/home/dhighley/_0VF.q6x0FB.douglas" >type=AVC msg=audit(1171463850.934:66132): avc: denied { link } for pid=21876 comm="procmail" name="_0VF.q6x0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171463850.934:66132): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=6202b0 a2=7fff1b5b2ec0 a3=61b650 items=0 ppid=21873 pid=21876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171463850.934:66133): avc: denied { unlink } for pid=21876 comm="procmail" name="_0VF.q6x0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171463850.934:66133): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=6202b0 a2=7fff1b5b2ec0 a3=61b650 items=0 ppid=21873 pid=21876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171464001.757:66134): user pid=21903 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171464001.757:66135): user pid=21904 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171464001.757:66136): login pid=21903 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171464001.757:66137): login pid=21904 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171464001.763:66138): user pid=21903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171464001.763:66139): user pid=21903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171464001.764:66140): user pid=21904 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171464001.764:66141): user pid=21904 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171464001.784:66142): user pid=21903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171464001.784:66143): user pid=21903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171464301.102:66144): user pid=21952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171464301.102:66145): login pid=21952 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171464301.108:66146): user pid=21952 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171464301.108:66147): user pid=21952 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171464601.431:66148): user pid=21997 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171464601.432:66150): login pid=21997 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171464601.432:66149): user pid=21996 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171464601.432:66151): login pid=21996 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171464601.437:66152): user pid=21997 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171464601.437:66153): user pid=21997 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171464601.443:66154): user pid=21996 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171464601.443:66155): user pid=21996 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171464601.467:66156): user pid=21996 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171464601.467:66157): user pid=21996 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171464870.528:66158): avc: denied { search } for pid=22043 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171464870.528:66158): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=22043 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171464870.529:66159): avc: denied { create } for pid=22043 comm="pyzor" name="XrMEG8" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171464870.529:66159): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=22043 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171464870.530:66160): avc: denied { getattr } for pid=22043 comm="pyzor" name="XrMEG8" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171464870.530:66160): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff0b36a800 a2=7fff0b36a800 a3=3 items=0 ppid=29238 pid=22043 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171464870.530:66160): path="/tmp/XrMEG8" >type=AVC msg=audit(1171464870.530:66161): avc: denied { write } for pid=22043 comm="pyzor" name="XrMEG8" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171464870.530:66161): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15804 items=0 ppid=29238 pid=22043 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171464870.530:66161): path="/tmp/XrMEG8" >type=AVC msg=audit(1171464870.530:66162): avc: denied { unlink } for pid=22043 comm="pyzor" name="XrMEG8" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171464870.530:66162): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=22043 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171464870.533:66163): avc: denied { read } for pid=22043 comm="pyzor" name="tmpqG8nWc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171464870.533:66163): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=22043 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171464870.533:66163): path=2F746D702F746D707147386E5763202864656C6574656429 >type=AVC msg=audit(1171464875.518:66164): avc: denied { append } for pid=22039 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171464875.518:66164): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=22034 pid=22039 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171464901.769:66165): user pid=22047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171464901.770:66166): login pid=22047 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171464901.773:66167): user pid=22047 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171464901.773:66168): user pid=22047 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171465201.098:66169): user pid=22084 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171465201.098:66170): login pid=22084 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171465201.100:66171): user pid=22085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171465201.100:66172): login pid=22085 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171465201.101:66173): user pid=22084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171465201.102:66174): user pid=22084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171465201.110:66175): user pid=22085 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171465201.111:66176): user pid=22085 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171465201.119:66177): user pid=22084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171465201.119:66178): user pid=22084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171465261.428:66179): user pid=22104 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171465261.428:66180): login pid=22104 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171465261.432:66181): user pid=22104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171465261.432:66182): user pid=22104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171465262.320:66183): user pid=22104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171465262.320:66184): user pid=22104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171465364.256:66185): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171465364.256:66185): arch=c000003e syscall=2 success=yes exit=9 a0=38db840 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171465368.315:66186): avc: denied { search } for pid=22140 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171465368.315:66186): avc: denied { write } for pid=22140 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171465368.315:66186): avc: denied { add_name } for pid=22140 comm="pyzor" name="KN2HDY" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171465368.315:66186): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=22140 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171465368.315:66187): avc: denied { remove_name } for pid=22140 comm="pyzor" name="KN2HDY" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171465368.315:66187): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=22140 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171465373.275:66188): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171465373.275:66188): arch=c000003e syscall=62 success=yes exit=0 a0=567c a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171465373.289:66189): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171465373.289:66189): arch=c000003e syscall=2 success=yes exit=9 a0=3719970 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171465373.300:66190): avc: denied { write } for pid=22136 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171465373.300:66190): avc: denied { add_name } for pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171465373.300:66190): avc: denied { create } for pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171465373.300:66190): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=22131 pid=22136 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171465373.300:66191): avc: denied { write } for pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171465373.300:66191): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=22131 pid=22136 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171465373.300:66191): path="/home/dhighley/_4ZF.dSy0FB.douglas" >type=AVC msg=audit(1171465373.301:66192): avc: denied { getattr } for pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171465373.301:66192): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff48497e90 a2=7fff48497e90 a3=61b650 items=0 ppid=22131 pid=22136 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171465373.301:66192): path="/home/dhighley/_4ZF.dSy0FB.douglas" >type=AVC msg=audit(1171465373.301:66193): avc: denied { link } for pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171465373.301:66193): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61fd90 a2=7fff48497db0 a3=61b650 items=0 ppid=22131 pid=22136 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171465373.301:66194): avc: denied { remove_name } for pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171465373.301:66194): avc: denied { unlink } for pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171465373.301:66194): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61fd90 a2=7fff48497db0 a3=61b650 items=0 ppid=22131 pid=22136 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171465501.327:66195): user pid=22152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171465501.327:66196): login pid=22152 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171465501.332:66197): user pid=22152 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171465501.332:66198): user pid=22152 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171465801.671:66199): user pid=22189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171465801.672:66200): login pid=22189 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171465801.673:66201): user pid=22190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171465801.673:66202): login pid=22190 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171465801.678:66203): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171465801.678:66204): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171465801.682:66205): user pid=22190 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171465801.682:66206): user pid=22190 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171465801.696:66207): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171465801.697:66208): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171465922.067:66209): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171465922.067:66209): arch=c000003e syscall=2 success=yes exit=12 a0=3867a40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171465922.067:66210): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171465922.067:66210): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171465922.067:66210): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171465932.276:66211): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171465932.276:66211): arch=c000003e syscall=86 success=yes exit=0 a0=3124af0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171465932.276:66212): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171465932.276:66212): arch=c000003e syscall=87 success=yes exit=0 a0=3124af0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171466101.019:66213): user pid=22237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171466101.020:66214): login pid=22237 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171466101.022:66215): user pid=22237 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171466101.022:66216): user pid=22237 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171466401.344:66217): user pid=22280 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171466401.344:66218): login pid=22280 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171466401.346:66219): user pid=22281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171466401.346:66220): login pid=22281 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171466401.348:66221): user pid=22280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171466401.348:66222): user pid=22280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171466401.351:66223): user pid=22281 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171466401.351:66224): user pid=22281 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171466401.369:66225): user pid=22280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171466401.369:66226): user pid=22280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171466690.021:66227): avc: denied { search } for pid=22322 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171466690.021:66227): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=22322 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171466701.692:66228): user pid=22325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171466701.692:66229): login pid=22325 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171466701.696:66230): user pid=22325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171466701.696:66231): user pid=22325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171466825.393:66232): avc: denied { create } for pid=22359 comm="pyzor" name="nS0Cp6" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171466825.393:66232): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=22359 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171466825.393:66233): avc: denied { getattr } for pid=22359 comm="pyzor" name="nS0Cp6" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171466825.393:66233): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff09f3f7e0 a2=7fff09f3f7e0 a3=2 items=0 ppid=29238 pid=22359 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171466825.393:66233): path="/tmp/nS0Cp6" >type=AVC msg=audit(1171466825.393:66234): avc: denied { write } for pid=22359 comm="pyzor" name="nS0Cp6" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171466825.393:66234): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=22359 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171466825.393:66234): path="/tmp/nS0Cp6" >type=AVC msg=audit(1171466825.394:66235): avc: denied { unlink } for pid=22359 comm="pyzor" name="nS0Cp6" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171466825.394:66235): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=22359 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171466825.399:66236): avc: denied { read } for pid=22359 comm="pyzor" name="tmpOY3YKe" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171466825.399:66236): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=554 items=0 ppid=29238 pid=22359 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171466825.399:66236): path=2F746D702F746D704F5933594B65202864656C6574656429 >type=USER_ACCT msg=audit(1171467001.025:66237): user pid=22379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171467001.025:66238): login pid=22379 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171467001.027:66239): user pid=22380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171467001.027:66240): login pid=22380 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171467001.028:66241): user pid=22379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171467001.028:66242): user pid=22379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171467001.037:66243): user pid=22380 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171467001.037:66244): user pid=22380 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171467001.047:66245): user pid=22379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171467001.047:66246): user pid=22379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171467284.796:66247): avc: denied { append } for pid=22414 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171467284.796:66247): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=22411 pid=22414 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171467301.376:66248): user pid=22423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171467301.376:66249): login pid=22423 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171467301.381:66250): user pid=22423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171467301.381:66251): user pid=22423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171467601.706:66252): user pid=22459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171467601.706:66253): login pid=22459 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171467601.709:66254): user pid=22460 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171467601.709:66255): login pid=22460 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171467601.710:66256): user pid=22459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171467601.710:66257): user pid=22459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171467601.715:66258): user pid=22460 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171467601.716:66259): user pid=22460 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171467601.740:66260): user pid=22459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171467601.741:66261): user pid=22459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171467658.505:66262): avc: denied { search } for pid=22483 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171467658.505:66262): avc: denied { write } for pid=22483 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171467658.505:66262): avc: denied { add_name } for pid=22483 comm="pyzor" name="JzVF4f" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171467658.505:66262): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=22483 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171467658.506:66263): avc: denied { remove_name } for pid=22483 comm="pyzor" name="JzVF4f" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171467658.506:66263): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=22483 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_AUTH msg=audit(1171467857.875:66264): user pid=22505 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=failed)' >type=USER_LOGIN msg=audit(1171467857.875:66265): user pid=22505 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=10.2.2.2, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1171467861.816:66266): user pid=22505 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171467861.816:66267): user pid=22505 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171467861.826:66268): user pid=22505 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171467861.827:66269): login pid=22505 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171467861.828:66270): user pid=22505 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171467861.876:66271): user pid=22508 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)' >type=CRED_REFR msg=audit(1171467861.887:66272): user pid=22508 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1171467899.535:66273): user pid=22505 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171467899.536:66274): user pid=22505 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171467901.039:66275): user pid=22550 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171467901.040:66276): login pid=22550 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171467901.043:66277): user pid=22550 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171467901.043:66278): user pid=22550 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171467967.796:66279): user pid=22571 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171467967.799:66280): user pid=22571 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171467967.799:66281): login pid=22571 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171467967.800:66282): user pid=22571 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1171467967.809:66283): user pid=22574 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171467967.898:66284): user pid=22571 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)' >type=CRED_DISP msg=audit(1171467991.789:66285): user pid=22571 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171467991.789:66286): user pid=22571 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=AVC msg=audit(1171468078.033:66287): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171468078.033:66287): arch=c000003e syscall=2 success=yes exit=12 a0=38ae350 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171468078.033:66288): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171468078.033:66288): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171468078.033:66288): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171468078.050:66289): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171468078.050:66289): arch=c000003e syscall=2 success=yes exit=9 a0=35b5b90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171468083.099:66290): avc: denied { getattr } for pid=22634 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171468083.099:66290): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffdf1140c0 a2=7fffdf1140c0 a3=6c6280 items=0 ppid=29238 pid=22634 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171468083.099:66290): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171468083.099:66291): avc: denied { read } for pid=22634 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171468083.099:66291): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=22634 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171468088.061:66292): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171468088.061:66292): arch=c000003e syscall=62 success=yes exit=0 a0=586a a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171468088.274:66293): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171468088.274:66293): arch=c000003e syscall=86 success=yes exit=0 a0=334ce80 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171468088.274:66294): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171468088.274:66294): arch=c000003e syscall=87 success=yes exit=0 a0=334ce80 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171468088.275:66295): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171468088.275:66295): arch=c000003e syscall=2 success=yes exit=10 a0=37e0d60 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171468088.293:66296): avc: denied { write } for pid=22630 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171468088.293:66296): avc: denied { add_name } for pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171468088.293:66296): avc: denied { create } for pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171468088.293:66296): arch=c000003e syscall=2 success=yes exit=6 a0=61f460 a1=c1 a2=124 a3=61f460 items=0 ppid=22627 pid=22630 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171468088.293:66297): avc: denied { write } for pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171468088.293:66297): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61f460 items=0 ppid=22627 pid=22630 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171468088.293:66297): path="/home/dhighley/_mhF.48y0FB.douglas" >type=AVC msg=audit(1171468088.294:66298): avc: denied { getattr } for pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171468088.294:66298): arch=c000003e syscall=4 success=yes exit=0 a0=61f460 a1=7fff253a9da0 a2=7fff253a9da0 a3=61f460 items=0 ppid=22627 pid=22630 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171468088.294:66298): path="/home/dhighley/_mhF.48y0FB.douglas" >type=AVC msg=audit(1171468088.294:66299): avc: denied { link } for pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171468088.294:66299): arch=c000003e syscall=86 success=yes exit=0 a0=61f460 a1=61b510 a2=7fff253a9cc0 a3=61f460 items=0 ppid=22627 pid=22630 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171468088.294:66300): avc: denied { remove_name } for pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171468088.294:66300): avc: denied { unlink } for pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171468088.294:66300): arch=c000003e syscall=87 success=yes exit=0 a0=61f460 a1=61b510 a2=7fff253a9cc0 a3=61f460 items=0 ppid=22627 pid=22630 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171468201.368:66301): user pid=22647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171468201.368:66302): login pid=22647 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171468201.369:66303): user pid=22648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171468201.370:66304): login pid=22648 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171468201.375:66305): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171468201.375:66306): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171468201.378:66307): user pid=22648 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171468201.378:66308): user pid=22648 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171468201.398:66309): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171468201.399:66310): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171468473.345:66311): avc: denied { search } for pid=22687 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171468473.345:66311): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=22687 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171468473.345:66312): avc: denied { search } for pid=22687 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171468473.345:66312): avc: denied { write } for pid=22687 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171468473.345:66312): avc: denied { add_name } for pid=22687 comm="pyzor" name="BZVVkG" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171468473.345:66312): avc: denied { create } for pid=22687 comm="pyzor" name="BZVVkG" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171468473.345:66312): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=22687 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171468473.346:66313): avc: denied { getattr } for pid=22687 comm="pyzor" name="BZVVkG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171468473.346:66313): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffff2f3e3d0 a2=7ffff2f3e3d0 a3=3 items=0 ppid=29238 pid=22687 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171468473.346:66313): path="/tmp/BZVVkG" >type=AVC msg=audit(1171468473.346:66314): avc: denied { write } for pid=22687 comm="pyzor" name="BZVVkG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171468473.346:66314): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=29238 pid=22687 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171468473.346:66314): path="/tmp/BZVVkG" >type=AVC msg=audit(1171468473.346:66315): avc: denied { remove_name } for pid=22687 comm="pyzor" name="BZVVkG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171468473.346:66315): avc: denied { unlink } for pid=22687 comm="pyzor" name="BZVVkG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171468473.346:66315): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=22687 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171468473.347:66316): avc: denied { read } for pid=22687 comm="pyzor" name="tmpeFH1k9" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171468473.347:66316): arch=c000003e syscall=0 success=yes exit=661 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=22687 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171468473.347:66316): path=2F746D702F746D70654648316B39202864656C6574656429 >type=USER_ACCT msg=audit(1171468501.711:66317): user pid=22693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171468501.711:66318): login pid=22693 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171468501.715:66319): user pid=22693 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171468501.715:66320): user pid=22693 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171468801.043:66321): user pid=22731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171468801.044:66322): login pid=22731 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171468801.046:66323): user pid=22732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171468801.047:66324): login pid=22732 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171468801.047:66325): user pid=22731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171468801.047:66326): user pid=22731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171468801.057:66327): user pid=22732 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171468801.058:66328): user pid=22732 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171468801.066:66329): user pid=22731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171468801.067:66330): user pid=22731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171468861.391:66331): user pid=22750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171468861.391:66332): login pid=22750 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171468861.395:66333): user pid=22750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171468861.395:66334): user pid=22750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171468862.278:66335): user pid=22750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171468862.278:66336): user pid=22750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171469101.285:66337): user pid=22786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171469101.285:66338): login pid=22786 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171469101.288:66339): user pid=22786 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171469101.288:66340): user pid=22786 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171469401.613:66341): user pid=22825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171469401.613:66342): login pid=22825 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171469401.615:66343): user pid=22826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171469401.615:66344): login pid=22826 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171469401.617:66345): user pid=22825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171469401.617:66346): user pid=22825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171469401.620:66347): user pid=22826 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171469401.621:66348): user pid=22826 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171469401.638:66349): user pid=22825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171469401.638:66350): user pid=22825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171469629.471:66351): user pid=21539 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171469629.471:66352): user pid=21539 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171469701.475:66353): user pid=22865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171469701.475:66354): login pid=22865 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171469701.478:66355): user pid=22865 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171469701.478:66356): user pid=22865 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171469876.961:66357): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171469876.961:66357): arch=c000003e syscall=2 success=yes exit=9 a0=3868b30 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171469881.526:66358): avc: denied { getattr } for pid=22896 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171469881.526:66358): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffeae81e30 a2=7fffeae81e30 a3=6c6280 items=0 ppid=29238 pid=22896 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171469881.526:66358): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171469881.526:66359): avc: denied { read } for pid=22896 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171469881.526:66359): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=22896 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171469886.488:66360): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171469886.488:66360): arch=c000003e syscall=62 success=yes exit=0 a0=5970 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171469886.567:66361): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171469886.567:66361): arch=c000003e syscall=2 success=yes exit=9 a0=3757db0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171470001.804:66362): user pid=22908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171470001.804:66363): login pid=22908 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171470001.806:66364): user pid=22907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171470001.806:66365): login pid=22907 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171470001.808:66366): user pid=22908 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171470001.808:66367): user pid=22908 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171470001.812:66368): user pid=22907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171470001.812:66369): user pid=22907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171470001.833:66370): user pid=22907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171470001.833:66371): user pid=22907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171470301.133:66372): user pid=22945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171470301.134:66373): login pid=22945 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171470301.137:66374): user pid=22945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171470301.138:66375): user pid=22945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171470601.465:66376): user pid=22980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171470601.465:66377): login pid=22980 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171470601.466:66378): user pid=22981 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171470601.466:66379): login pid=22981 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171470601.472:66380): user pid=22980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171470601.472:66381): user pid=22980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171470601.477:66382): user pid=22981 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171470601.477:66383): user pid=22981 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171470601.492:66384): user pid=22980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171470601.493:66385): user pid=22980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171470901.806:66386): user pid=23017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171470901.806:66387): login pid=23017 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171470901.810:66388): user pid=23017 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171470901.810:66389): user pid=23017 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171471201.132:66390): user pid=23052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171471201.132:66391): login pid=23052 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171471201.134:66392): user pid=23053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171471201.134:66393): login pid=23053 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171471201.135:66394): user pid=23052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171471201.135:66395): user pid=23052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171471201.147:66396): user pid=23053 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171471201.147:66397): user pid=23053 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171471201.153:66398): user pid=23052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171471201.153:66399): user pid=23052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171471501.467:66400): user pid=23090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171471501.468:66401): login pid=23090 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171471501.471:66402): user pid=23090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171471501.471:66403): user pid=23090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171471801.791:66404): user pid=23123 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171471801.791:66405): login pid=23123 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171471801.793:66406): user pid=23124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171471801.794:66407): login pid=23124 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171471801.797:66408): user pid=23123 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171471801.797:66409): user pid=23123 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171471801.799:66410): user pid=23124 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171471801.799:66411): user pid=23124 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171471801.818:66412): user pid=23123 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171471801.818:66413): user pid=23123 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171472101.124:66414): user pid=23160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171472101.124:66415): login pid=23160 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171472101.128:66416): user pid=23160 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171472101.128:66417): user pid=23160 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171472325.079:66418): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171472325.079:66418): arch=c000003e syscall=2 success=yes exit=12 a0=3311440 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171472325.080:66419): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171472325.080:66419): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171472325.080:66419): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171472333.963:66420): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171472333.963:66420): arch=c000003e syscall=86 success=yes exit=0 a0=37f8b70 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171472333.963:66421): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171472333.963:66421): arch=c000003e syscall=87 success=yes exit=0 a0=37f8b70 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171472333.976:66422): avc: denied { write } for pid=23194 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171472333.976:66422): avc: denied { add_name } for pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171472333.976:66422): avc: denied { create } for pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171472333.976:66422): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=23191 pid=23194 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171472333.977:66423): avc: denied { write } for pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171472333.977:66423): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b670 items=0 ppid=23191 pid=23194 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171472333.977:66423): path="/home/dhighley/_aqF.N_z0FB.douglas" >type=AVC msg=audit(1171472333.977:66424): avc: denied { getattr } for pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171472333.977:66424): arch=c000003e syscall=4 success=yes exit=0 a0=61b670 a1=7fffc8c5a650 a2=7fffc8c5a650 a3=61b670 items=0 ppid=23191 pid=23194 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171472333.977:66424): path="/home/dhighley/_aqF.N_z0FB.douglas" >type=AVC msg=audit(1171472333.977:66425): avc: denied { link } for pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171472333.977:66425): arch=c000003e syscall=86 success=yes exit=0 a0=61b670 a1=61cfb0 a2=7fffc8c5a570 a3=61b670 items=0 ppid=23191 pid=23194 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171472333.977:66426): avc: denied { remove_name } for pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171472333.977:66426): avc: denied { unlink } for pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171472333.977:66426): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61cfb0 a2=7fffc8c5a570 a3=61b670 items=0 ppid=23191 pid=23194 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171472401.453:66427): user pid=23207 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171472401.453:66428): login pid=23207 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171472401.455:66429): user pid=23208 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171472401.456:66430): login pid=23208 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171472401.456:66431): user pid=23209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171472401.456:66432): login pid=23209 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171472401.459:66433): user pid=23207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171472401.459:66434): user pid=23207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171472401.461:66435): user pid=23208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171472401.461:66436): user pid=23208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171472401.470:66437): user pid=23209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171472401.471:66438): user pid=23209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171472401.480:66439): user pid=23207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171472401.480:66440): user pid=23207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171472461.795:66441): user pid=23228 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171472461.795:66442): login pid=23228 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171472461.798:66443): user pid=23228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171472461.798:66444): user pid=23228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171472462.698:66445): user pid=23228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171472462.699:66446): user pid=23228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171472701.704:66447): user pid=23272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171472701.704:66448): login pid=23272 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171472701.707:66449): user pid=23272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171472701.707:66450): user pid=23272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171473001.028:66451): user pid=23313 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171473001.028:66452): login pid=23313 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171473001.029:66453): user pid=23314 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171473001.029:66454): login pid=23314 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171473001.034:66455): user pid=23313 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171473001.034:66456): user pid=23313 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171473001.037:66457): user pid=23314 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171473001.038:66458): user pid=23314 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171473001.053:66459): user pid=23313 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171473001.053:66460): user pid=23313 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171473301.368:66461): user pid=23355 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171473301.368:66462): login pid=23355 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171473301.372:66463): user pid=23355 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171473301.372:66464): user pid=23355 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171473601.692:66465): user pid=23389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171473601.692:66466): login pid=23389 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171473601.693:66467): user pid=23390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171473601.694:66468): login pid=23390 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171473601.698:66469): user pid=23389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171473601.698:66470): user pid=23389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171473601.704:66471): user pid=23390 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171473601.704:66472): user pid=23390 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171473601.719:66473): user pid=23389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171473601.719:66474): user pid=23389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171473901.027:66475): user pid=23427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171473901.028:66476): login pid=23427 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171473901.032:66477): user pid=23427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171473901.032:66478): user pid=23427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171474201.359:66479): user pid=23488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171474201.360:66480): login pid=23488 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171474201.362:66481): user pid=23489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171474201.362:66482): login pid=23489 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171474201.362:66483): user pid=23488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171474201.363:66484): user pid=23488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171474201.367:66485): user pid=23489 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171474201.367:66486): user pid=23489 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171474201.384:66487): user pid=23488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171474201.384:66488): user pid=23488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171474501.695:66489): user pid=23523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171474501.696:66490): login pid=23523 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171474501.698:66491): user pid=23523 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171474501.698:66492): user pid=23523 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171474801.017:66493): user pid=23559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171474801.017:66494): login pid=23559 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171474801.020:66495): user pid=23560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171474801.020:66496): login pid=23560 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171474801.023:66497): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171474801.023:66498): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171474801.025:66499): user pid=23560 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171474801.025:66500): user pid=23560 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171474801.043:66501): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171474801.043:66502): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171475101.363:66503): user pid=23595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171475101.363:66504): login pid=23595 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171475101.367:66505): user pid=23595 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171475101.367:66506): user pid=23595 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171475401.696:66507): user pid=23627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171475401.696:66508): login pid=23627 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171475401.698:66509): user pid=23628 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171475401.698:66510): login pid=23628 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171475401.700:66511): user pid=23627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171475401.700:66512): user pid=23627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171475401.705:66513): user pid=23628 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171475401.705:66514): user pid=23628 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171475401.720:66515): user pid=23627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171475401.720:66516): user pid=23627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171475701.036:66517): user pid=23664 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171475701.036:66518): login pid=23664 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171475701.041:66519): user pid=23664 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171475701.041:66520): user pid=23664 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171476001.365:66521): user pid=23697 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171476001.365:66522): login pid=23697 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171476001.366:66523): user pid=23698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171476001.366:66524): login pid=23698 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171476001.368:66525): user pid=23697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171476001.368:66526): user pid=23697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171476001.371:66527): user pid=23698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171476001.371:66528): user pid=23698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171476001.405:66529): user pid=23697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171476001.405:66530): user pid=23697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171476061.700:66531): user pid=23713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171476061.700:66532): login pid=23713 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171476061.703:66533): user pid=23713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171476061.703:66534): user pid=23713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171476062.617:66535): user pid=23713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171476062.617:66536): user pid=23713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171476301.624:66537): user pid=23751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171476301.624:66538): login pid=23751 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171476301.628:66539): user pid=23751 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171476301.628:66540): user pid=23751 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171476566.479:66541): user pid=23790 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171476566.480:66542): user pid=23790 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171476566.481:66543): login pid=23790 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171476566.481:66544): user pid=23790 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1171476566.492:66545): user pid=23793 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171476566.583:66546): user pid=23790 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)' >type=CRED_DISP msg=audit(1171476573.673:66547): user pid=23790 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171476573.673:66548): user pid=23790 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171476601.948:66549): user pid=23834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171476601.948:66550): login pid=23834 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171476601.950:66551): user pid=23835 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171476601.950:66552): login pid=23835 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171476601.954:66553): user pid=23834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171476601.954:66554): user pid=23834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171476601.956:66555): user pid=23835 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171476601.956:66556): user pid=23835 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171476601.978:66557): user pid=23834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171476601.978:66558): user pid=23834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171476901.298:66559): user pid=23875 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171476901.298:66560): login pid=23875 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171476901.301:66561): user pid=23875 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171476901.301:66562): user pid=23875 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171476941.938:66563): avc: denied { search } for pid=23895 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171476941.938:66563): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171476941.938:66564): avc: denied { getattr } for pid=23895 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171476941.938:66564): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb7c60c00 a2=7fffb7c60c00 a3=6c6280 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171476941.938:66564): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171476941.939:66565): avc: denied { read } for pid=23895 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171476941.939:66565): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171476941.939:66566): avc: denied { create } for pid=23895 comm="pyzor" name="CXGp5v" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171476941.939:66566): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171476941.940:66567): avc: denied { getattr } for pid=23895 comm="pyzor" name="CXGp5v" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171476941.940:66567): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb7c5f500 a2=7fffb7c5f500 a3=2 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171476941.940:66567): path="/tmp/CXGp5v" >type=AVC msg=audit(1171476941.940:66568): avc: denied { write } for pid=23895 comm="pyzor" name="CXGp5v" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171476941.940:66568): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171476941.940:66568): path="/tmp/CXGp5v" >type=AVC msg=audit(1171476941.940:66569): avc: denied { unlink } for pid=23895 comm="pyzor" name="CXGp5v" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171476941.940:66569): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6c6280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171476942.255:66570): avc: denied { write } for pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171476942.255:66570): arch=c000003e syscall=2 success=yes exit=10 a0=30234c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171477201.635:66571): user pid=23918 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171477201.635:66572): login pid=23918 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171477201.637:66573): user pid=23919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171477201.637:66574): login pid=23919 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171477201.641:66575): user pid=23918 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171477201.641:66576): user pid=23918 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171477201.643:66577): user pid=23919 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171477201.643:66578): user pid=23919 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171477201.671:66579): user pid=23918 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171477201.671:66580): user pid=23918 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171477501.974:66581): user pid=23955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171477501.974:66582): login pid=23955 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171477501.977:66583): user pid=23955 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171477501.977:66584): user pid=23955 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171477801.305:66585): user pid=23995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171477801.305:66586): login pid=23995 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171477801.307:66587): user pid=23994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171477801.307:66588): login pid=23994 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171477801.311:66589): user pid=23995 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171477801.312:66590): user pid=23995 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171477801.314:66591): user pid=23994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171477801.314:66592): user pid=23994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171477801.337:66593): user pid=23994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171477801.337:66594): user pid=23994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171478101.637:66595): user pid=24031 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171478101.637:66596): login pid=24031 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171478101.640:66597): user pid=24031 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171478101.640:66598): user pid=24031 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171478309.001:66599): avc: denied { append } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171478309.001:66599): arch=c000003e syscall=2 success=yes exit=13 a0=32627a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171478309.001:66600): avc: denied { ioctl } for pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171478309.001:66600): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171478309.001:66600): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171478309.009:66601): avc: denied { append } for pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171478309.009:66601): arch=c000003e syscall=2 success=yes exit=9 a0=2c64a90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171478313.082:66602): avc: denied { read } for pid=24071 comm="pyzor" name="tmpLjJPo9" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171478313.082:66602): arch=c000003e syscall=0 success=yes exit=2857 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=24071 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171478313.082:66602): path=2F746D702F746D704C6A4A506F39202864656C6574656429 >type=AVC msg=audit(1171478318.043:66603): avc: denied { signal } for pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171478318.043:66603): arch=c000003e syscall=62 success=yes exit=0 a0=5e07 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171478318.051:66604): avc: denied { link } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171478318.051:66604): arch=c000003e syscall=86 success=yes exit=0 a0=386d4e0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171478318.051:66605): avc: denied { unlink } for pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171478318.051:66605): arch=c000003e syscall=87 success=yes exit=0 a0=386d4e0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171478401.960:66606): user pid=24079 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171478401.960:66607): login pid=24079 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171478401.962:66608): user pid=24080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171478401.962:66609): login pid=24080 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171478401.964:66610): user pid=24079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171478401.964:66611): user pid=24079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171478401.973:66612): user pid=24080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171478401.973:66613): user pid=24080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171478401.984:66614): user pid=24079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171478401.984:66615): user pid=24079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171478475.688:66616): avc: denied { create } for pid=24100 comm="procmail" name="_k4F.Lf10FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171478475.688:66616): arch=c000003e syscall=2 success=yes exit=6 a0=61b020 a1=c1 a2=124 a3=61b020 items=0 ppid=24097 pid=24100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171478475.688:66617): avc: denied { write } for pid=24100 comm="procmail" name="_k4F.Lf10FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171478475.688:66617): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b020 items=0 ppid=24097 pid=24100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171478475.688:66617): path="/home/dhighley/_k4F.Lf10FB.douglas" >type=AVC msg=audit(1171478475.688:66618): avc: denied { getattr } for pid=24100 comm="procmail" name="_k4F.Lf10FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171478475.688:66618): arch=c000003e syscall=4 success=yes exit=0 a0=61b020 a1=7fff13ba05a0 a2=7fff13ba05a0 a3=61b020 items=0 ppid=24097 pid=24100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171478475.688:66618): path="/home/dhighley/_k4F.Lf10FB.douglas" >type=AVC msg=audit(1171478475.688:66619): avc: denied { link } for pid=24100 comm="procmail" name="_k4F.Lf10FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171478475.688:66619): arch=c000003e syscall=86 success=yes exit=0 a0=61b020 a1=61c920 a2=7fff13ba04c0 a3=61b020 items=0 ppid=24097 pid=24100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171478475.688:66620): avc: denied { unlink } for pid=24100 comm="procmail" name="_k4F.Lf10FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171478475.688:66620): arch=c000003e syscall=87 success=yes exit=0 a0=61b020 a1=61c920 a2=7fff13ba04c0 a3=61b020 items=0 ppid=24097 pid=24100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171478475.688:66621): avc: denied { append } for pid=24100 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171478475.688:66621): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=24097 pid=24100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171478701.308:66622): user pid=24128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171478701.308:66623): login pid=24128 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171478701.312:66624): user pid=24128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171478701.312:66625): user pid=24128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171479001.631:66626): user pid=24161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171479001.631:66627): login pid=24161 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171479001.633:66628): user pid=24162 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171479001.633:66629): login pid=24162 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171479001.634:66630): user pid=24161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171479001.634:66631): user pid=24161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171479001.644:66632): user pid=24162 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171479001.644:66633): user pid=24162 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171479001.668:66634): user pid=24161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171479001.668:66635): user pid=24161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171479301.963:66636): user pid=24197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171479301.963:66637): login pid=24197 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171479301.967:66638): user pid=24197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171479301.967:66639): user pid=24197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171479601.286:66640): user pid=24232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171479601.286:66641): login pid=24232 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171479601.288:66642): user pid=24231 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171479601.288:66643): login pid=24231 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171479601.292:66644): user pid=24232 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171479601.292:66645): user pid=24232 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171479601.295:66646): user pid=24231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171479601.295:66647): user pid=24231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171479601.316:66648): user pid=24231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171479601.316:66649): user pid=24231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171479661.612:66650): user pid=24246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171479661.613:66651): login pid=24246 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171479661.615:66652): user pid=24246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171479661.615:66653): user pid=24246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171479662.498:66654): user pid=24246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171479662.498:66655): user pid=24246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171479901.504:66656): user pid=24283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171479901.504:66657): login pid=24283 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171479901.507:66658): user pid=24283 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171479901.507:66659): user pid=24283 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171480201.826:66660): user pid=24330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171480201.827:66661): login pid=24330 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171480201.829:66662): user pid=24331 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171480201.829:66663): login pid=24331 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171480201.830:66664): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171480201.831:66665): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171480201.836:66666): user pid=24331 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171480201.836:66667): user pid=24331 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171480201.852:66668): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171480201.852:66669): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171480387.541:66670): user pid=23208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171480387.541:66671): user pid=23208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171480501.546:66672): user pid=24384 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171480501.546:66673): login pid=24384 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171480501.549:66674): user pid=24384 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171480501.549:66675): user pid=24384 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171480801.870:66676): user pid=24420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171480801.871:66677): login pid=24420 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171480801.872:66678): user pid=24419 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171480801.872:66679): login pid=24419 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171480801.876:66680): user pid=24420 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171480801.877:66681): user pid=24420 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171480801.879:66682): user pid=24419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171480801.880:66683): user pid=24419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171480801.902:66684): user pid=24419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171480801.902:66685): user pid=24419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171480810.954:66686): avc: denied { search } for pid=24440 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171480810.954:66686): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=24440 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171481101.213:66687): user pid=24462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171481101.213:66688): login pid=24462 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171481101.218:66689): user pid=24462 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171481101.218:66690): user pid=24462 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171481401.538:66691): user pid=24505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171481401.538:66692): login pid=24505 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171481401.540:66693): user pid=24506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171481401.540:66694): login pid=24506 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171481401.542:66695): user pid=24505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171481401.542:66696): user pid=24505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171481401.550:66697): user pid=24506 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171481401.551:66698): user pid=24506 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171481401.560:66699): user pid=24505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171481401.561:66700): user pid=24505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171481701.881:66701): user pid=24542 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171481701.881:66702): login pid=24542 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171481701.884:66703): user pid=24542 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171481701.884:66704): user pid=24542 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171482001.206:66705): user pid=24574 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171482001.207:66706): login pid=24574 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171482001.209:66707): user pid=24575 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171482001.209:66708): login pid=24575 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171482001.210:66709): user pid=24574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171482001.211:66710): user pid=24574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171482001.216:66711): user pid=24575 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171482001.216:66712): user pid=24575 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171482001.230:66713): user pid=24574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171482001.230:66714): user pid=24574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171482301.549:66715): user pid=24611 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171482301.549:66716): login pid=24611 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171482301.552:66717): user pid=24611 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171482301.552:66718): user pid=24611 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171482601.885:66719): user pid=24646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171482601.885:66720): login pid=24646 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171482601.887:66721): user pid=24647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171482601.888:66722): login pid=24647 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171482601.889:66723): user pid=24646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171482601.889:66724): user pid=24646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171482601.892:66725): user pid=24647 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171482601.893:66726): user pid=24647 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171482601.919:66727): user pid=24646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171482601.919:66728): user pid=24646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171482901.216:66729): user pid=24683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171482901.216:66730): login pid=24683 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171482901.218:66731): user pid=24683 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171482901.218:66732): user pid=24683 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171483201.537:66733): user pid=24716 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171483201.537:66734): login pid=24716 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171483201.540:66735): user pid=24717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171483201.540:66736): login pid=24717 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171483201.542:66737): user pid=24718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171483201.542:66738): login pid=24718 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171483201.543:66739): user pid=24716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171483201.543:66740): user pid=24716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171483201.543:66741): user pid=24717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171483201.543:66742): user pid=24717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171483201.558:66743): user pid=24718 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171483201.558:66744): user pid=24718 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171483201.562:66745): user pid=24716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171483201.562:66746): user pid=24716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171483261.878:66747): user pid=24737 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171483261.879:66748): login pid=24737 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171483261.884:66749): user pid=24737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171483261.884:66750): user pid=24737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171483262.786:66751): user pid=24737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171483262.786:66752): user pid=24737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171483501.794:66753): user pid=24773 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171483501.794:66754): login pid=24773 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171483501.797:66755): user pid=24773 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171483501.797:66756): user pid=24773 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171483607.198:66757): avc: denied { create } for pid=24800 comm="pyzor" name="6ocyDi" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171483607.198:66757): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=24800 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171483607.198:66758): avc: denied { getattr } for pid=24800 comm="pyzor" name="6ocyDi" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171483607.198:66758): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd7c9c130 a2=7fffd7c9c130 a3=3 items=0 ppid=29238 pid=24800 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171483607.198:66758): path="/tmp/6ocyDi" >type=AVC msg=audit(1171483607.198:66759): avc: denied { write } for pid=24800 comm="pyzor" name="6ocyDi" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171483607.198:66759): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=29238 pid=24800 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171483607.198:66759): path="/tmp/6ocyDi" >type=AVC msg=audit(1171483607.199:66760): avc: denied { unlink } for pid=24800 comm="pyzor" name="6ocyDi" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171483607.199:66760): arch=c000003e syscall=87 success=yes exit=0 a0=6d8360 a1=6ae6b0 a2=37a8f2f4d8 a3=6d8360 items=0 ppid=29238 pid=24800 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171483607.200:66761): avc: denied { read } for pid=24800 comm="pyzor" name="tmpXD0Ncm" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171483607.200:66761): arch=c000003e syscall=0 success=yes exit=1012 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=24800 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171483607.200:66761): path=2F746D702F746D705844304E636D202864656C6574656429 >type=USER_ACCT msg=audit(1171483801.119:66762): user pid=24817 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171483801.120:66763): login pid=24817 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171483801.122:66764): user pid=24818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171483801.122:66765): login pid=24818 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171483801.122:66766): user pid=24817 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171483801.122:66767): user pid=24817 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171483801.132:66768): user pid=24818 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171483801.132:66769): user pid=24818 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171483801.142:66770): user pid=24817 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171483801.142:66771): user pid=24817 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171484101.465:66772): user pid=24863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171484101.465:66773): login pid=24863 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171484101.467:66774): user pid=24863 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171484101.468:66775): user pid=24863 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171484401.795:66776): user pid=24907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171484401.795:66777): login pid=24907 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171484401.798:66778): user pid=24908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171484401.798:66779): login pid=24908 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171484401.798:66780): user pid=24907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171484401.798:66781): user pid=24907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171484401.810:66782): user pid=24908 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171484401.810:66783): user pid=24908 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171484401.817:66784): user pid=24907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171484401.818:66785): user pid=24907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171484419.170:66786): avc: denied { append } for pid=24924 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171484419.170:66786): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=24921 pid=24924 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171484616.461:66787): avc: denied { setattr } for pid=24967 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171484616.461:66787): arch=c000003e syscall=132 success=yes exit=0 a0=2daa1e0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171484616.462:66788): avc: denied { rename } for pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171484616.462:66788): arch=c000003e syscall=82 success=yes exit=0 a0=304a530 a1=3060880 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171484701.147:66789): user pid=25043 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171484701.148:66790): login pid=25043 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171484701.152:66791): user pid=25043 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171484701.152:66792): user pid=25043 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171485001.474:66793): user pid=25080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171485001.475:66794): login pid=25080 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171485001.477:66795): user pid=25081 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171485001.477:66796): login pid=25081 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171485001.478:66797): user pid=25080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171485001.479:66798): user pid=25080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171485001.482:66799): user pid=25081 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171485001.482:66800): user pid=25081 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171485001.497:66801): user pid=25080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171485001.497:66802): user pid=25080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171485301.814:66803): user pid=25129 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171485301.814:66804): login pid=25129 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171485301.819:66805): user pid=25129 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171485301.819:66806): user pid=25129 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171485601.140:66807): user pid=25171 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171485601.140:66808): login pid=25171 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171485601.140:66809): user pid=25172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171485601.141:66810): login pid=25172 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171485601.146:66811): user pid=25171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171485601.146:66812): user pid=25171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171485601.149:66813): user pid=25172 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171485601.150:66814): user pid=25172 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171485601.166:66815): user pid=25171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171485601.166:66816): user pid=25171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171485901.481:66817): user pid=25218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171485901.481:66818): login pid=25218 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171485901.485:66819): user pid=25218 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171485901.485:66820): user pid=25218 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171486201.805:66821): user pid=25252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171486201.805:66822): login pid=25252 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171486201.807:66823): user pid=25253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171486201.808:66824): login pid=25253 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171486201.808:66825): user pid=25252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171486201.809:66826): user pid=25252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171486201.820:66827): user pid=25253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171486201.820:66828): user pid=25253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171486201.827:66829): user pid=25252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171486201.828:66830): user pid=25252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171486501.140:66831): user pid=25306 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171486501.140:66832): login pid=25306 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171486501.144:66833): user pid=25306 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171486501.144:66834): user pid=25306 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171486505.603:66835): avc: denied { search } for pid=25316 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171486505.603:66835): avc: denied { write } for pid=25316 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171486505.603:66835): avc: denied { add_name } for pid=25316 comm="pyzor" name="5deAU1" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171486505.603:66835): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=24967 pid=25316 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171486505.603:66836): avc: denied { remove_name } for pid=25316 comm="pyzor" name="5deAU1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171486505.603:66836): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=25316 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171486702.873:66837): user pid=25343 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171486702.874:66838): user pid=25343 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171486702.875:66839): login pid=25343 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171486702.875:66840): user pid=25343 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1171486702.885:66841): user pid=25346 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171486702.976:66842): user pid=25343 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1171486801.479:66843): user pid=25402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171486801.480:66844): login pid=25402 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171486801.482:66845): user pid=25403 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171486801.482:66846): login pid=25403 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171486801.483:66847): user pid=25402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171486801.483:66848): user pid=25402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171486801.492:66849): user pid=25403 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171486801.492:66850): user pid=25403 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171486801.511:66851): user pid=25402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171486801.511:66852): user pid=25402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171486861.820:66853): user pid=25418 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171486861.820:66854): login pid=25418 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171486861.824:66855): user pid=25418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171486861.824:66856): user pid=25418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171486862.708:66857): user pid=25418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171486862.708:66858): user pid=25418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171487101.716:66859): user pid=25467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171487101.717:66860): login pid=25467 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171487101.721:66861): user pid=25467 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171487101.721:66862): user pid=25467 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171487306.131:66863): user pid=25343 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171487306.132:66864): user pid=25343 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171487401.049:66865): user pid=25514 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171487401.049:66866): login pid=25514 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171487401.050:66867): user pid=25513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171487401.050:66868): login pid=25513 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171487401.055:66869): user pid=25514 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171487401.055:66870): user pid=25514 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171487401.061:66871): user pid=25513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171487401.061:66872): user pid=25513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171487401.082:66873): user pid=25513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171487401.083:66874): user pid=25513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171487433.063:66875): avc: denied { append } for pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171487433.063:66875): arch=c000003e syscall=2 success=yes exit=13 a0=32c1660 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171487433.063:66876): avc: denied { ioctl } for pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171487433.063:66876): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171487433.063:66876): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171487436.619:66877): avc: denied { search } for pid=25537 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171487436.619:66877): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171487436.619:66878): avc: denied { getattr } for pid=25537 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171487436.619:66878): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff1c7176c0 a2=7fff1c7176c0 a3=6c6280 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171487436.619:66878): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171487436.620:66879): avc: denied { read } for pid=25537 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171487436.620:66879): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171487436.620:66880): avc: denied { create } for pid=25537 comm="pyzor" name="ucxZEe" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171487436.620:66880): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171487436.620:66881): avc: denied { getattr } for pid=25537 comm="pyzor" name="ucxZEe" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171487436.620:66881): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff1c715bb0 a2=7fff1c715bb0 a3=3 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171487436.620:66881): path="/tmp/ucxZEe" >type=AVC msg=audit(1171487436.621:66882): avc: denied { write } for pid=25537 comm="pyzor" name="ucxZEe" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171487436.621:66882): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171487436.621:66882): path="/tmp/ucxZEe" >type=AVC msg=audit(1171487436.621:66883): avc: denied { unlink } for pid=25537 comm="pyzor" name="ucxZEe" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171487436.621:66883): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171487436.623:66884): avc: denied { read } for pid=25537 comm="pyzor" name="tmphsUWUo" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171487436.623:66884): arch=c000003e syscall=0 success=yes exit=815 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171487436.623:66884): path=2F746D702F746D7068735557556F202864656C6574656429 >type=AVC msg=audit(1171487441.582:66885): avc: denied { signal } for pid=24967 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171487441.582:66885): arch=c000003e syscall=62 success=yes exit=0 a0=63c1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171487441.756:66886): avc: denied { link } for pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171487441.756:66886): arch=c000003e syscall=86 success=yes exit=0 a0=30bde40 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171487441.757:66887): avc: denied { unlink } for pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171487441.757:66887): arch=c000003e syscall=87 success=yes exit=0 a0=30bde40 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171487441.801:66888): avc: denied { write } for pid=25533 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171487441.801:66888): avc: denied { add_name } for pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171487441.801:66888): avc: denied { create } for pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171487441.801:66888): arch=c000003e syscall=2 success=yes exit=6 a0=61c960 a1=c1 a2=124 a3=61c960 items=0 ppid=25530 pid=25533 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171487441.801:66889): avc: denied { write } for pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171487441.801:66889): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c960 items=0 ppid=25530 pid=25533 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171487441.801:66889): path="/home/dhighley/_9OG.Rr30FB.douglas" >type=AVC msg=audit(1171487441.801:66890): avc: denied { getattr } for pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171487441.801:66890): arch=c000003e syscall=4 success=yes exit=0 a0=61c960 a1=7fff06ed28d0 a2=7fff06ed28d0 a3=61c960 items=0 ppid=25530 pid=25533 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171487441.801:66890): path="/home/dhighley/_9OG.Rr30FB.douglas" >type=AVC msg=audit(1171487441.801:66891): avc: denied { link } for pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171487441.801:66891): arch=c000003e syscall=86 success=yes exit=0 a0=61c960 a1=61b510 a2=7fff06ed27f0 a3=61c960 items=0 ppid=25530 pid=25533 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171487441.802:66892): avc: denied { remove_name } for pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171487441.802:66892): avc: denied { unlink } for pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171487441.802:66892): arch=c000003e syscall=87 success=yes exit=0 a0=61c960 a1=61b510 a2=7fff06ed27f0 a3=61c960 items=0 ppid=25530 pid=25533 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171487441.802:66893): avc: denied { append } for pid=25533 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171487441.802:66893): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=25530 pid=25533 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171487701.403:66894): user pid=25573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171487701.403:66895): login pid=25573 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171487701.407:66896): user pid=25573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171487701.407:66897): user pid=25573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171488001.742:66898): user pid=25607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171488001.742:66899): login pid=25607 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171488001.743:66900): user pid=25608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171488001.743:66901): login pid=25608 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171488001.747:66902): user pid=25607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171488001.747:66903): user pid=25607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171488001.750:66904): user pid=25608 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171488001.750:66905): user pid=25608 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171488001.767:66906): user pid=25607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171488001.767:66907): user pid=25607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171488301.086:66908): user pid=25649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171488301.086:66909): login pid=25649 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171488301.088:66910): user pid=25649 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171488301.088:66911): user pid=25649 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171488601.408:66912): user pid=25685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171488601.409:66913): login pid=25685 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171488601.411:66914): user pid=25686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171488601.411:66915): login pid=25686 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171488601.413:66916): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171488601.413:66917): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171488601.419:66918): user pid=25686 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171488601.419:66919): user pid=25686 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171488601.440:66920): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171488601.440:66921): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171488841.007:66922): avc: denied { append } for pid=24967 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171488841.007:66922): arch=c000003e syscall=2 success=yes exit=10 a0=3021cc0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171488841.865:66923): avc: denied { getattr } for pid=25723 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171488841.865:66923): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffd1b26ad0 a2=7fffd1b26ad0 a3=6c6280 items=0 ppid=24967 pid=25723 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171488841.865:66923): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171488841.865:66924): avc: denied { read } for pid=25723 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171488841.865:66924): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=25723 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171488846.827:66925): avc: denied { signal } for pid=24967 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171488846.827:66925): arch=c000003e syscall=62 success=yes exit=0 a0=647b a1=f a2=54 a3=0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171488846.901:66926): avc: denied { write } for pid=24967 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171488846.901:66926): arch=c000003e syscall=2 success=yes exit=10 a0=39cc600 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171488901.746:66927): user pid=25729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171488901.746:66928): login pid=25729 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171488901.750:66929): user pid=25729 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171488901.750:66930): user pid=25729 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171489201.077:66931): user pid=25762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171489201.078:66932): login pid=25762 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171489201.080:66933): user pid=25763 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171489201.080:66934): login pid=25763 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171489201.080:66935): user pid=25762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171489201.081:66936): user pid=25762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171489201.086:66937): user pid=25763 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171489201.087:66938): user pid=25763 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171489201.105:66939): user pid=25762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171489201.106:66940): user pid=25762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171489501.411:66941): user pid=25799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171489501.412:66942): login pid=25799 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171489501.415:66943): user pid=25799 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171489501.415:66944): user pid=25799 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171489614.297:66945): avc: denied { append } for pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171489614.297:66945): arch=c000003e syscall=2 success=yes exit=13 a0=3a65f30 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171489614.297:66946): avc: denied { ioctl } for pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171489614.297:66946): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171489614.297:66946): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171489620.093:66947): avc: denied { link } for pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171489620.093:66947): arch=c000003e syscall=86 success=yes exit=0 a0=32d5510 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171489620.093:66948): avc: denied { unlink } for pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171489620.093:66948): arch=c000003e syscall=87 success=yes exit=0 a0=32d5510 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171489801.736:66949): user pid=25842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171489801.736:66950): login pid=25842 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171489801.738:66951): user pid=25843 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171489801.738:66952): login pid=25843 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171489801.739:66953): user pid=25842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171489801.739:66954): user pid=25842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171489801.746:66955): user pid=25843 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171489801.746:66956): user pid=25843 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171489801.771:66957): user pid=25842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171489801.771:66958): user pid=25842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171489992.639:66959): avc: denied { write } for pid=25872 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171489992.639:66959): avc: denied { add_name } for pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171489992.639:66959): avc: denied { create } for pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171489992.639:66959): arch=c000003e syscall=2 success=yes exit=6 a0=61b520 a1=c1 a2=124 a3=61b520 items=0 ppid=25869 pid=25872 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171489992.639:66960): avc: denied { write } for pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171489992.639:66960): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b520 items=0 ppid=25869 pid=25872 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171489992.639:66960): path="/home/dhighley/_QUG.IT40FB.douglas" >type=AVC msg=audit(1171489992.639:66961): avc: denied { getattr } for pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171489992.639:66961): arch=c000003e syscall=4 success=yes exit=0 a0=61b520 a1=7fff8239cd90 a2=7fff8239cd90 a3=61b520 items=0 ppid=25869 pid=25872 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171489992.639:66961): path="/home/dhighley/_QUG.IT40FB.douglas" >type=AVC msg=audit(1171489992.639:66962): avc: denied { link } for pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171489992.639:66962): arch=c000003e syscall=86 success=yes exit=0 a0=61b520 a1=61d0d0 a2=7fff8239ccb0 a3=61b520 items=0 ppid=25869 pid=25872 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171489992.639:66963): avc: denied { remove_name } for pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171489992.639:66963): avc: denied { unlink } for pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171489992.639:66963): arch=c000003e syscall=87 success=yes exit=0 a0=61b520 a1=61d0d0 a2=7fff8239ccb0 a3=61b520 items=0 ppid=25869 pid=25872 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171490101.083:66964): user pid=25896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171490101.083:66965): login pid=25896 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171490101.087:66966): user pid=25896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171490101.087:66967): user pid=25896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171490397.543:66968): user pid=25933 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171490397.544:66969): user pid=25933 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171490397.545:66970): login pid=25933 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171490397.545:66971): user pid=25933 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1171490397.555:66972): user pid=25936 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171490397.647:66973): user pid=25933 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1171490401.408:66974): user pid=25971 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171490401.408:66975): login pid=25971 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171490401.408:66976): user pid=25970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171490401.409:66977): login pid=25970 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171490401.414:66978): user pid=25971 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171490401.414:66979): user pid=25971 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171490401.416:66980): user pid=25970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171490401.416:66981): user pid=25970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171490401.447:66982): user pid=25970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171490401.448:66983): user pid=25970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171490461.745:66984): user pid=25991 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171490461.746:66985): login pid=25991 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171490461.748:66986): user pid=25991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171490461.748:66987): user pid=25991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171490462.661:66988): user pid=25991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171490462.661:66989): user pid=25991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171490477.948:66990): user pid=25933 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171490477.948:66991): user pid=25933 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171490701.667:66992): user pid=26031 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171490701.667:66993): login pid=26031 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171490701.671:66994): user pid=26031 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171490701.671:66995): user pid=26031 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171491001.007:66996): user pid=26071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171491001.008:66997): login pid=26071 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171491001.010:66998): user pid=26072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171491001.010:66999): login pid=26072 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171491001.012:67000): user pid=26071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171491001.012:67001): user pid=26071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171491001.016:67002): user pid=26072 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171491001.016:67003): user pid=26072 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171491001.032:67004): user pid=26071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171491001.032:67005): user pid=26071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171491187.658:67006): user pid=24717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171491187.659:67007): user pid=24717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171491301.664:67008): user pid=26112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171491301.664:67009): login pid=26112 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171491301.668:67010): user pid=26112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171491301.668:67011): user pid=26112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171491448.011:67012): avc: denied { setattr } for pid=24967 comm="spamd" name="bayes.lock" dev=dm-0 ino=12485674 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171491448.011:67012): arch=c000003e syscall=132 success=yes exit=0 a0=2daa1e0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171491448.012:67013): avc: denied { rename } for pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=12485716 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171491448.012:67013): arch=c000003e syscall=82 success=yes exit=0 a0=304a530 a1=3060880 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171491448.872:67014): avc: denied { search } for pid=26148 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171491448.872:67014): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171491448.873:67015): avc: denied { getattr } for pid=26148 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171491448.873:67015): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff5fcabc50 a2=7fff5fcabc50 a3=6c6280 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171491448.873:67015): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171491448.873:67016): avc: denied { read } for pid=26148 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171491448.873:67016): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171491448.874:67017): avc: denied { create } for pid=26148 comm="pyzor" name="TRnAMi" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171491448.874:67017): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171491448.874:67018): avc: denied { getattr } for pid=26148 comm="pyzor" name="TRnAMi" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171491448.874:67018): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff5fcaa550 a2=7fff5fcaa550 a3=2 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171491448.874:67018): path="/tmp/TRnAMi" >type=AVC msg=audit(1171491448.874:67019): avc: denied { write } for pid=26148 comm="pyzor" name="TRnAMi" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171491448.874:67019): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171491448.874:67019): path="/tmp/TRnAMi" >type=AVC msg=audit(1171491448.874:67020): avc: denied { unlink } for pid=26148 comm="pyzor" name="TRnAMi" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171491448.874:67020): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171491448.876:67021): avc: denied { read } for pid=26148 comm="pyzor" name="tmp57pGw-" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171491448.876:67021): arch=c000003e syscall=0 success=yes exit=499 a0=4 a1=2aaaaf34d000 a2=1000 a3=61 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171491448.876:67021): path=2F746D702F746D7035377047772D202864656C6574656429 >type=AVC msg=audit(1171491453.834:67022): avc: denied { signal } for pid=24967 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171491453.834:67022): arch=c000003e syscall=62 success=yes exit=0 a0=6624 a1=f a2=54 a3=0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171491453.936:67023): avc: denied { write } for pid=24967 comm="spamd" name="auto-whitelist" dev=dm-0 ino=12487184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171491453.936:67023): arch=c000003e syscall=2 success=yes exit=10 a0=3056dd0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171491453.947:67024): avc: denied { append } for pid=26144 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171491453.947:67024): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26139 pid=26144 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171491453.947:67025): avc: denied { lock } for pid=26144 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171491453.947:67025): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=26139 pid=26144 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171491453.947:67025): path="/home/phighley/spamlog" >type=USER_ACCT msg=audit(1171491601.990:67026): user pid=26161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171491601.991:67027): login pid=26161 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171491601.993:67028): user pid=26162 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171491601.993:67029): login pid=26162 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171491601.994:67030): user pid=26161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171491601.994:67031): user pid=26161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171491602.004:67032): user pid=26162 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171491602.005:67033): user pid=26162 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171491602.016:67034): user pid=26161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171491602.016:67035): user pid=26161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171491883.412:67036): avc: denied { append } for pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171491883.412:67036): arch=c000003e syscall=2 success=yes exit=13 a0=37b6820 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171491883.412:67037): avc: denied { ioctl } for pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171491883.412:67037): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171491883.412:67037): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171491883.419:67038): avc: denied { append } for pid=24967 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171491883.419:67038): arch=c000003e syscall=2 success=yes exit=10 a0=3183480 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171491883.985:67039): avc: denied { getattr } for pid=26205 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171491883.985:67039): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9dc83380 a2=7fff9dc83380 a3=6c6280 items=0 ppid=24967 pid=26205 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171491883.985:67039): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171491883.985:67040): avc: denied { read } for pid=26205 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171491883.985:67040): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26205 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171491889.015:67041): avc: denied { link } for pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171491889.015:67041): arch=c000003e syscall=86 success=yes exit=0 a0=303d910 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171491889.015:67042): avc: denied { unlink } for pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171491889.015:67042): arch=c000003e syscall=87 success=yes exit=0 a0=303d910 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171491901.340:67043): user pid=26209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171491901.340:67044): login pid=26209 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171491901.344:67045): user pid=26209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171491901.344:67046): user pid=26209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171492201.665:67047): user pid=26244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171492201.665:67048): login pid=26244 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171492201.665:67049): user pid=26245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171492201.666:67050): login pid=26245 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171492201.667:67051): user pid=26244 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171492201.667:67052): user pid=26244 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171492201.679:67053): user pid=26245 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171492201.679:67054): user pid=26245 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171492201.687:67055): user pid=26244 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171492201.688:67056): user pid=26244 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171492502.000:67057): user pid=26284 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171492502.000:67058): login pid=26284 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171492502.004:67059): user pid=26284 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171492502.004:67060): user pid=26284 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171492683.994:67061): avc: denied { search } for pid=26316 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171492683.994:67061): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26316 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171492689.295:67062): avc: denied { create } for pid=26312 comm="procmail" name="_IbG.R940FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171492689.295:67062): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=26309 pid=26312 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171492689.296:67063): avc: denied { write } for pid=26312 comm="procmail" name="_IbG.R940FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171492689.296:67063): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=26309 pid=26312 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171492689.296:67063): path="/home/dhighley/_IbG.R940FB.douglas" >type=AVC msg=audit(1171492689.296:67064): avc: denied { getattr } for pid=26312 comm="procmail" name="_IbG.R940FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171492689.296:67064): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff64936330 a2=7fff64936330 a3=61b650 items=0 ppid=26309 pid=26312 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171492689.296:67064): path="/home/dhighley/_IbG.R940FB.douglas" >type=AVC msg=audit(1171492689.296:67065): avc: denied { link } for pid=26312 comm="procmail" name="_IbG.R940FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171492689.296:67065): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61dda0 a2=7fff64936250 a3=61b650 items=0 ppid=26309 pid=26312 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171492689.296:67066): avc: denied { unlink } for pid=26312 comm="procmail" name="_IbG.R940FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171492689.296:67066): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61dda0 a2=7fff64936250 a3=61b650 items=0 ppid=26309 pid=26312 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171492689.296:67067): avc: denied { append } for pid=26312 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171492689.296:67067): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26309 pid=26312 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171492801.325:67068): user pid=26328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171492801.325:67069): login pid=26328 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171492801.327:67070): user pid=26329 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171492801.328:67071): login pid=26329 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171492801.329:67072): user pid=26328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171492801.329:67073): user pid=26328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171492801.332:67074): user pid=26329 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171492801.333:67075): user pid=26329 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171492801.349:67076): user pid=26328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171492801.350:67077): user pid=26328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171492859.017:67078): avc: denied { create } for pid=26352 comm="pyzor" name="lIU7ls" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171492859.017:67078): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=24967 pid=26352 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171492859.017:67079): avc: denied { getattr } for pid=26352 comm="pyzor" name="lIU7ls" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171492859.017:67079): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff10c1c4c0 a2=7fff10c1c4c0 a3=2 items=0 ppid=24967 pid=26352 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171492859.017:67079): path="/tmp/lIU7ls" >type=AVC msg=audit(1171492859.018:67080): avc: denied { write } for pid=26352 comm="pyzor" name="lIU7ls" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171492859.018:67080): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=24967 pid=26352 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171492859.018:67080): path="/tmp/lIU7ls" >type=AVC msg=audit(1171492859.018:67081): avc: denied { unlink } for pid=26352 comm="pyzor" name="lIU7ls" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171492859.018:67081): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=26352 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171492859.020:67082): avc: denied { read } for pid=26352 comm="pyzor" name="tmp397rzq" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171492859.020:67082): arch=c000003e syscall=0 success=yes exit=3395 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=24967 pid=26352 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171492859.020:67082): path=2F746D702F746D70333937727A71202864656C6574656429 >type=AVC msg=audit(1171492864.201:67083): avc: denied { append } for pid=26348 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171492864.201:67083): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26345 pid=26348 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171493101.662:67084): user pid=26374 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171493101.662:67085): login pid=26374 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171493101.665:67086): user pid=26374 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171493101.665:67087): user pid=26374 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171493401.990:67088): user pid=26409 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171493401.990:67089): login pid=26409 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171493401.992:67090): user pid=26408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171493401.992:67091): login pid=26408 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171493401.994:67092): user pid=26408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171493401.994:67093): user pid=26408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171493401.998:67094): user pid=26409 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171493401.998:67095): user pid=26409 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171493402.014:67096): user pid=26408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171493402.014:67097): user pid=26408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171493701.342:67098): user pid=26448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171493701.342:67099): login pid=26448 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171493701.346:67100): user pid=26448 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171493701.346:67101): user pid=26448 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171494001.664:67102): user pid=26482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171494001.665:67103): login pid=26482 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171494001.667:67104): user pid=26483 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171494001.667:67105): login pid=26483 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171494001.669:67106): user pid=26482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171494001.669:67107): user pid=26482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171494001.669:67108): user pid=26484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171494001.670:67109): login pid=26484 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171494001.678:67110): user pid=26483 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171494001.678:67111): user pid=26483 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171494001.686:67112): user pid=26484 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171494001.686:67113): user pid=26484 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171494001.694:67114): user pid=26482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171494001.694:67115): user pid=26482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171494037.433:67116): avc: denied { getattr } for pid=26511 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171494037.433:67116): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffde4a9450 a2=7fffde4a9450 a3=6c6280 items=0 ppid=24967 pid=26511 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171494037.433:67116): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171494037.433:67117): avc: denied { read } for pid=26511 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171494037.433:67117): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26511 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171494037.434:67118): avc: denied { search } for pid=26511 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171494037.434:67118): avc: denied { write } for pid=26511 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171494037.434:67118): avc: denied { add_name } for pid=26511 comm="pyzor" name="_nR1UC" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171494037.434:67118): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=24967 pid=26511 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171494037.435:67119): avc: denied { remove_name } for pid=26511 comm="pyzor" name="_nR1UC" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171494037.435:67119): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=26511 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171494042.481:67120): avc: denied { write } for pid=26507 comm="procmail" name="phighley" dev=dm-0 ino=12485733 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171494042.481:67120): avc: denied { add_name } for pid=26507 comm="procmail" name="_LeG.aS50FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171494042.481:67120): arch=c000003e syscall=2 success=yes exit=6 a0=61dbf0 a1=c1 a2=124 a3=61dbf0 items=0 ppid=26502 pid=26507 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171494042.482:67121): avc: denied { remove_name } for pid=26507 comm="procmail" name="_LeG.aS50FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171494042.482:67121): arch=c000003e syscall=87 success=yes exit=0 a0=61dbf0 a1=61b520 a2=7fff92603f20 a3=61dbf0 items=0 ppid=26502 pid=26507 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171494042.482:67122): avc: denied { append } for pid=26507 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171494042.482:67122): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26502 pid=26507 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171494042.482:67123): avc: denied { lock } for pid=26507 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171494042.482:67123): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=26502 pid=26507 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171494042.482:67123): path="/home/phighley/spamlog" >type=USER_ACCT msg=audit(1171494061.009:67124): user pid=26514 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171494061.009:67125): login pid=26514 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171494061.013:67126): user pid=26514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171494061.013:67127): user pid=26514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171494061.931:67128): user pid=26514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171494061.931:67129): user pid=26514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171494301.940:67130): user pid=26551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171494301.940:67131): login pid=26551 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171494301.945:67132): user pid=26551 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171494301.945:67133): user pid=26551 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171494601.268:67134): user pid=26589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171494601.268:67135): login pid=26589 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171494601.270:67136): user pid=26588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171494601.270:67137): login pid=26588 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171494601.272:67138): user pid=26588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171494601.273:67139): user pid=26588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171494601.277:67140): user pid=26589 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171494601.277:67141): user pid=26589 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171494601.292:67142): user pid=26588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171494601.292:67143): user pid=26588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171494783.235:67144): user pid=26617 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171494783.237:67145): user pid=26617 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171494783.238:67146): login pid=26617 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171494783.238:67147): user pid=26617 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1171494783.248:67148): user pid=26620 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171494783.339:67149): user pid=26617 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)' >type=CRED_DISP msg=audit(1171494853.952:67150): user pid=26617 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171494853.952:67151): user pid=26617 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171494901.599:67152): user pid=26672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171494901.599:67153): login pid=26672 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171494901.602:67154): user pid=26672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171494901.603:67155): user pid=26672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171495201.925:67156): user pid=26708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171495201.926:67157): login pid=26708 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171495201.927:67158): user pid=26709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171495201.927:67159): login pid=26709 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171495201.929:67160): user pid=26708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171495201.929:67161): user pid=26708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171495201.938:67162): user pid=26709 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171495201.938:67163): user pid=26709 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171495201.948:67164): user pid=26708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171495201.948:67165): user pid=26708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171495501.267:67166): user pid=26745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171495501.267:67167): login pid=26745 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171495501.271:67168): user pid=26745 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171495501.271:67169): user pid=26745 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171495801.598:67170): user pid=26780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171495801.599:67171): login pid=26780 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171495801.601:67172): user pid=26781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171495801.601:67173): login pid=26781 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171495801.605:67174): user pid=26780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171495801.605:67175): user pid=26780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171495801.607:67176): user pid=26781 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171495801.607:67177): user pid=26781 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171495801.633:67178): user pid=26780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171495801.634:67179): user pid=26780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171496101.939:67180): user pid=26817 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171496101.939:67181): login pid=26817 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171496101.943:67182): user pid=26817 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171496101.944:67183): user pid=26817 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171496283.618:67184): avc: denied { append } for pid=24967 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171496283.618:67184): arch=c000003e syscall=2 success=yes exit=10 a0=30a6010 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171496284.369:67185): avc: denied { search } for pid=26847 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171496284.369:67185): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171496284.369:67186): avc: denied { getattr } for pid=26847 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171496284.369:67186): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff5b994940 a2=7fff5b994940 a3=6c6280 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171496284.369:67186): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171496284.369:67187): avc: denied { read } for pid=26847 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171496284.369:67187): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171496284.370:67188): avc: denied { search } for pid=26847 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171496284.370:67188): avc: denied { write } for pid=26847 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171496284.370:67188): avc: denied { add_name } for pid=26847 comm="pyzor" name="rEU9dr" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171496284.370:67188): avc: denied { create } for pid=26847 comm="pyzor" name="rEU9dr" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171496284.370:67188): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171496284.370:67189): avc: denied { getattr } for pid=26847 comm="pyzor" name="rEU9dr" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171496284.370:67189): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff5b992e30 a2=7fff5b992e30 a3=3 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171496284.370:67189): path="/tmp/rEU9dr" >type=AVC msg=audit(1171496284.370:67190): avc: denied { write } for pid=26847 comm="pyzor" name="rEU9dr" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171496284.370:67190): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171496284.370:67190): path="/tmp/rEU9dr" >type=AVC msg=audit(1171496284.370:67191): avc: denied { remove_name } for pid=26847 comm="pyzor" name="rEU9dr" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171496284.370:67191): avc: denied { unlink } for pid=26847 comm="pyzor" name="rEU9dr" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171496284.370:67191): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171496284.371:67192): avc: denied { read } for pid=26847 comm="pyzor" name="tmpDHy6OZ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171496284.371:67192): arch=c000003e syscall=0 success=yes exit=653 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171496284.371:67192): path=2F746D702F746D70444879364F5A202864656C6574656429 >type=AVC msg=audit(1171496289.329:67193): avc: denied { signal } for pid=24967 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171496289.329:67193): arch=c000003e syscall=62 success=yes exit=0 a0=68df a1=f a2=54 a3=0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171496289.343:67194): avc: denied { write } for pid=24967 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171496289.343:67194): arch=c000003e syscall=2 success=yes exit=10 a0=3078270 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171496289.363:67195): avc: denied { create } for pid=26843 comm="procmail" name="_bjG.h150FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171496289.363:67195): arch=c000003e syscall=2 success=yes exit=6 a0=61b5c0 a1=c1 a2=124 a3=61b5c0 items=0 ppid=26840 pid=26843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171496289.363:67196): avc: denied { write } for pid=26843 comm="procmail" name="_bjG.h150FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171496289.363:67196): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b5c0 items=0 ppid=26840 pid=26843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171496289.363:67196): path="/home/dhighley/_bjG.h150FB.douglas" >type=AVC msg=audit(1171496289.364:67197): avc: denied { getattr } for pid=26843 comm="procmail" name="_bjG.h150FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171496289.364:67197): arch=c000003e syscall=4 success=yes exit=0 a0=61b5c0 a1=7fff86d0f700 a2=7fff86d0f700 a3=61b5c0 items=0 ppid=26840 pid=26843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171496289.364:67197): path="/home/dhighley/_bjG.h150FB.douglas" >type=AVC msg=audit(1171496289.364:67198): avc: denied { link } for pid=26843 comm="procmail" name="_bjG.h150FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171496289.364:67198): arch=c000003e syscall=86 success=yes exit=0 a0=61b5c0 a1=61cf40 a2=7fff86d0f620 a3=61b5c0 items=0 ppid=26840 pid=26843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171496289.364:67199): avc: denied { unlink } for pid=26843 comm="procmail" name="_bjG.h150FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171496289.364:67199): arch=c000003e syscall=87 success=yes exit=0 a0=61b5c0 a1=61cf40 a2=7fff86d0f620 a3=61b5c0 items=0 ppid=26840 pid=26843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171496289.364:67200): avc: denied { append } for pid=26843 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171496289.364:67200): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26840 pid=26843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171496401.268:67201): user pid=26859 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171496401.268:67202): user pid=26860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171496401.268:67203): login pid=26859 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171496401.268:67204): login pid=26860 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171496401.275:67205): user pid=26860 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171496401.275:67206): user pid=26860 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171496401.277:67207): user pid=26859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171496401.277:67208): user pid=26859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171496401.305:67209): user pid=26859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171496401.306:67210): user pid=26859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171496651.801:67211): avc: denied { signal } for pid=24967 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171496651.801:67211): arch=c000003e syscall=62 success=yes exit=0 a0=6914 a1=f a2=54 a3=0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171496701.602:67212): user pid=26905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171496701.602:67213): login pid=26905 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171496701.606:67214): user pid=26905 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171496701.606:67215): user pid=26905 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171497001.928:67216): user pid=26939 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171497001.929:67217): login pid=26939 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171497001.931:67218): user pid=26940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171497001.931:67219): login pid=26940 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171497001.933:67220): user pid=26939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171497001.933:67221): user pid=26939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171497001.943:67222): user pid=26940 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171497001.943:67223): user pid=26940 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171497001.956:67224): user pid=26939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171497001.957:67225): user pid=26939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171497022.766:67226): avc: denied { append } for pid=24967 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171497022.766:67226): arch=c000003e syscall=2 success=yes exit=10 a0=3037110 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171497023.352:67227): avc: denied { getattr } for pid=26963 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171497023.352:67227): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb35f95a0 a2=7fffb35f95a0 a3=6c6280 items=0 ppid=24967 pid=26963 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171497023.352:67227): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171497023.352:67228): avc: denied { read } for pid=26963 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171497023.352:67228): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26963 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171497030.430:67229): avc: denied { write } for pid=24967 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171497030.430:67229): arch=c000003e syscall=2 success=yes exit=10 a0=37ab6b0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171497301.273:67230): user pid=26984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171497301.274:67231): login pid=26984 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171497301.278:67232): user pid=26984 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171497301.278:67233): user pid=26984 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171497601.604:67234): user pid=27021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171497601.604:67235): login pid=27021 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171497601.605:67236): user pid=27022 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171497601.605:67237): login pid=27022 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171497601.610:67238): user pid=27021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171497601.610:67239): user pid=27021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171497601.614:67240): user pid=27022 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171497601.614:67241): user pid=27022 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171497601.635:67242): user pid=27021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171497601.635:67243): user pid=27021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171497661.943:67244): user pid=27037 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171497661.944:67245): login pid=27037 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171497661.947:67246): user pid=27037 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171497661.948:67247): user pid=27037 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171497662.832:67248): user pid=27037 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171497662.832:67249): user pid=27037 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171497901.840:67250): user pid=27072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171497901.840:67251): login pid=27072 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171497901.844:67252): user pid=27072 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171497901.844:67253): user pid=27072 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171498201.164:67254): user pid=27106 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171498201.164:67255): login pid=27106 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171498201.166:67256): user pid=27107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171498201.166:67257): login pid=27107 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171498201.167:67258): user pid=27106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171498201.167:67259): user pid=27106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171498201.174:67260): user pid=27107 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171498201.174:67261): user pid=27107 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171498201.184:67262): user pid=27106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171498201.184:67263): user pid=27106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171498501.511:67264): user pid=27143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171498501.511:67265): login pid=27143 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171498501.515:67266): user pid=27143 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171498501.515:67267): user pid=27143 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171498801.843:67268): user pid=27176 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171498801.843:67269): login pid=27176 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171498801.844:67270): user pid=27177 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171498801.844:67271): login pid=27177 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171498801.849:67272): user pid=27176 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171498801.849:67273): user pid=27176 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171498801.852:67274): user pid=27177 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171498801.853:67275): user pid=27177 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171498801.870:67276): user pid=27176 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171498801.870:67277): user pid=27176 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171499101.183:67278): user pid=27211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171499101.183:67279): login pid=27211 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171499101.187:67280): user pid=27211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171499101.187:67281): user pid=27211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171499401.514:67282): user pid=27246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171499401.514:67283): login pid=27246 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171499401.514:67284): user pid=27245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171499401.514:67285): login pid=27245 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171499401.519:67286): user pid=27246 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171499401.520:67287): user pid=27246 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171499401.523:67288): user pid=27245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171499401.523:67289): user pid=27245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171499401.547:67290): user pid=27245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171499401.548:67291): user pid=27245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171499701.844:67292): user pid=27282 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171499701.844:67293): login pid=27282 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171499701.848:67294): user pid=27282 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171499701.848:67295): user pid=27282 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171500001.169:67296): user pid=27316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171500001.169:67297): login pid=27316 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171500001.170:67298): user pid=27315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171500001.170:67299): login pid=27315 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171500001.176:67300): user pid=27315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171500001.176:67301): user pid=27315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171500001.179:67302): user pid=27316 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171500001.179:67303): user pid=27316 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171500001.199:67304): user pid=27315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171500001.199:67305): user pid=27315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171500301.516:67306): user pid=27353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171500301.516:67307): login pid=27353 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171500301.519:67308): user pid=27353 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171500301.519:67309): user pid=27353 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171500382.406:67310): avc: denied { append } for pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171500382.406:67310): arch=c000003e syscall=2 success=yes exit=13 a0=38c7e80 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171500382.406:67311): avc: denied { ioctl } for pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171500382.406:67311): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171500382.406:67311): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171500388.277:67312): avc: denied { link } for pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171500388.277:67312): arch=c000003e syscall=86 success=yes exit=0 a0=30fc890 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171500388.277:67313): avc: denied { unlink } for pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171500388.277:67313): arch=c000003e syscall=87 success=yes exit=0 a0=30fc890 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171500388.315:67314): avc: denied { write } for pid=27375 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171500388.315:67314): avc: denied { add_name } for pid=27375 comm="procmail" name="_vrG.k160FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171500388.315:67314): avc: denied { create } for pid=27375 comm="procmail" name="_vrG.k160FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171500388.315:67314): arch=c000003e syscall=2 success=yes exit=6 a0=61ca20 a1=c1 a2=124 a3=61ca20 items=0 ppid=27372 pid=27375 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171500388.315:67315): avc: denied { write } for pid=27375 comm="procmail" name="_vrG.k160FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171500388.315:67315): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61ca20 items=0 ppid=27372 pid=27375 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171500388.315:67315): path="/home/dhighley/_vrG.k160FB.douglas" >type=AVC msg=audit(1171500388.316:67316): avc: denied { getattr } for pid=27375 comm="procmail" name="_vrG.k160FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171500388.316:67316): arch=c000003e syscall=4 success=yes exit=0 a0=61ca20 a1=7fffbd2acca0 a2=7fffbd2acca0 a3=61ca20 items=0 ppid=27372 pid=27375 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171500388.316:67316): path="/home/dhighley/_vrG.k160FB.douglas" >type=AVC msg=audit(1171500388.316:67317): avc: denied { link } for pid=27375 comm="procmail" name="_vrG.k160FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171500388.316:67317): arch=c000003e syscall=86 success=yes exit=0 a0=61ca20 a1=61b520 a2=7fffbd2acbc0 a3=61ca20 items=0 ppid=27372 pid=27375 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171500388.316:67318): avc: denied { remove_name } for pid=27375 comm="procmail" name="_vrG.k160FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171500388.316:67318): avc: denied { unlink } for pid=27375 comm="procmail" name="_vrG.k160FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171500388.316:67318): arch=c000003e syscall=87 success=yes exit=0 a0=61ca20 a1=61b520 a2=7fffbd2acbc0 a3=61ca20 items=0 ppid=27372 pid=27375 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171500601.843:67319): user pid=27397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171500601.843:67320): login pid=27397 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171500601.845:67321): user pid=27398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171500601.846:67322): login pid=27398 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171500601.848:67323): user pid=27397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171500601.848:67324): user pid=27397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171500601.858:67325): user pid=27398 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171500601.858:67326): user pid=27398 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171500601.870:67327): user pid=27397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171500601.870:67328): user pid=27397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171500901.190:67329): user pid=27433 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171500901.190:67330): login pid=27433 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171500901.195:67331): user pid=27433 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171500901.195:67332): user pid=27433 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171501201.513:67333): user pid=27467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171501201.513:67334): login pid=27467 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171501201.514:67335): user pid=27466 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171501201.514:67336): login pid=27466 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171501201.519:67337): user pid=27467 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171501201.519:67338): user pid=27467 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171501201.524:67339): user pid=27466 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171501201.524:67340): user pid=27466 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171501201.546:67341): user pid=27466 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171501201.546:67342): user pid=27466 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171501261.837:67343): user pid=27491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171501261.838:67344): login pid=27491 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171501261.841:67345): user pid=27491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171501261.842:67346): user pid=27491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171501262.753:67347): user pid=27491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171501262.753:67348): user pid=27491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171501501.760:67349): user pid=27537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171501501.761:67350): login pid=27537 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171501501.764:67351): user pid=27537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171501501.764:67352): user pid=27537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171501801.082:67353): user pid=27572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171501801.083:67354): login pid=27572 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171501801.085:67355): user pid=27573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171501801.085:67356): login pid=27573 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171501801.086:67357): user pid=27572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171501801.086:67358): user pid=27572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171501801.089:67359): user pid=27573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171501801.089:67360): user pid=27573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171501801.105:67361): user pid=27572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171501801.105:67362): user pid=27572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171501989.939:67363): user pid=26483 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171501989.939:67364): user pid=26483 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171502101.946:67365): user pid=27609 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171502101.946:67366): login pid=27609 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171502101.950:67367): user pid=27609 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171502101.950:67368): user pid=27609 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171502401.271:67369): user pid=27641 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171502401.271:67370): login pid=27641 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171502401.273:67371): user pid=27642 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171502401.274:67372): login pid=27642 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171502401.277:67373): user pid=27641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171502401.277:67374): user pid=27641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171502401.279:67375): user pid=27642 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171502401.279:67376): user pid=27642 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171502401.299:67377): user pid=27641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171502401.300:67378): user pid=27641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171502701.604:67379): user pid=27676 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171502701.604:67380): login pid=27676 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171502701.607:67381): user pid=27676 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171502701.607:67382): user pid=27676 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171503001.927:67383): user pid=27710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171503001.927:67384): login pid=27710 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171503001.929:67385): user pid=27711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171503001.929:67386): login pid=27711 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171503001.931:67387): user pid=27710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171503001.931:67388): user pid=27710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171503001.943:67389): user pid=27711 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171503001.943:67390): user pid=27711 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171503001.950:67391): user pid=27710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171503001.950:67392): user pid=27710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171503301.272:67393): user pid=27747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171503301.272:67394): login pid=27747 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171503301.275:67395): user pid=27747 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171503301.275:67396): user pid=27747 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171503601.605:67397): user pid=27781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171503601.605:67398): login pid=27781 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171503601.607:67399): user pid=27782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171503601.607:67400): login pid=27782 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171503601.608:67401): user pid=27781 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171503601.608:67402): user pid=27781 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171503601.619:67403): user pid=27782 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171503601.619:67404): user pid=27782 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171503601.626:67405): user pid=27781 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171503601.627:67406): user pid=27781 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171503901.947:67407): user pid=27817 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171503901.948:67408): login pid=27817 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171503901.950:67409): user pid=27817 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171503901.950:67410): user pid=27817 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171504201.269:67411): user pid=27852 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171504201.269:67412): login pid=27852 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171504201.270:67413): user pid=27851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171504201.270:67414): login pid=27851 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171504201.273:67415): user pid=27851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171504201.273:67416): user pid=27851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171504201.275:67417): user pid=27852 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171504201.275:67418): user pid=27852 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171504201.290:67419): user pid=27851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171504201.290:67420): user pid=27851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171504501.600:67421): user pid=27888 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171504501.600:67422): login pid=27888 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171504501.604:67423): user pid=27888 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171504501.604:67424): user pid=27888 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171504801.936:67425): user pid=27943 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171504801.937:67426): login pid=27943 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171504801.939:67427): user pid=27944 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171504801.939:67428): login pid=27944 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171504801.941:67429): user pid=27945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171504801.941:67430): user pid=27943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171504801.941:67431): login pid=27945 uid=0 old auid=4294967295 new auid=111 >type=CRED_ACQ msg=audit(1171504801.941:67432): user pid=27943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171504801.951:67433): user pid=27944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171504801.951:67434): user pid=27944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171504801.952:67435): user pid=27945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171504801.952:67436): user pid=27945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171504801.970:67437): user pid=27943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171504801.970:67438): user pid=27943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171504861.278:67439): user pid=27967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171504861.278:67440): login pid=27967 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171504861.281:67441): user pid=27967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171504861.282:67442): user pid=27967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171504862.166:67443): user pid=27967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171504862.166:67444): user pid=27967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171505101.173:67445): user pid=28016 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171505101.174:67446): login pid=28016 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171505101.178:67447): user pid=28016 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171505101.178:67448): user pid=28016 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171505401.502:67449): user pid=28052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171505401.502:67450): login pid=28052 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171505401.503:67451): user pid=28051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171505401.503:67452): login pid=28051 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171505401.506:67453): user pid=28051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171505401.506:67454): user pid=28051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171505401.508:67455): user pid=28052 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171505401.508:67456): user pid=28052 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171505401.529:67457): user pid=28051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171505401.529:67458): user pid=28051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171505701.841:67459): user pid=28093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171505701.841:67460): login pid=28093 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171505701.845:67461): user pid=28093 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171505701.845:67462): user pid=28093 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171506001.165:67463): user pid=28127 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171506001.165:67464): login pid=28127 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171506001.167:67465): user pid=28128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171506001.167:67466): login pid=28128 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171506001.173:67467): user pid=28127 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171506001.173:67468): user pid=28127 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171506001.176:67469): user pid=28128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171506001.176:67470): user pid=28128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171506001.203:67471): user pid=28127 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171506001.204:67472): user pid=28127 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171506195.454:67473): avc: denied { setattr } for pid=24967 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171506195.454:67473): arch=c000003e syscall=132 success=yes exit=0 a0=2daa1e0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171506195.454:67474): avc: denied { rename } for pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171506195.454:67474): arch=c000003e syscall=82 success=yes exit=0 a0=304a530 a1=3060880 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171506202.893:67475): avc: denied { search } for pid=28161 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171506202.893:67475): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=28161 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171506301.514:67476): user pid=28172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171506301.514:67477): login pid=28172 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171506301.518:67478): user pid=28172 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171506301.519:67479): user pid=28172 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171506479.924:67480): avc: denied { create } for pid=28204 comm="pyzor" name="CEhwAn" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171506479.924:67480): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=24967 pid=28204 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171506479.924:67481): avc: denied { getattr } for pid=28204 comm="pyzor" name="CEhwAn" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171506479.924:67481): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff3ee2c2c0 a2=7fff3ee2c2c0 a3=3 items=0 ppid=24967 pid=28204 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171506479.924:67481): path="/tmp/CEhwAn" >type=AVC msg=audit(1171506479.924:67482): avc: denied { write } for pid=28204 comm="pyzor" name="CEhwAn" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171506479.924:67482): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=24967 pid=28204 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171506479.924:67482): path="/tmp/CEhwAn" >type=AVC msg=audit(1171506479.924:67483): avc: denied { unlink } for pid=28204 comm="pyzor" name="CEhwAn" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171506479.924:67483): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=28204 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171506479.925:67484): avc: denied { read } for pid=28204 comm="pyzor" name="tmp60T7DL" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171506479.925:67484): arch=c000003e syscall=0 success=yes exit=1264 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=24967 pid=28204 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171506479.925:67484): path=2F746D702F746D7036305437444C202864656C6574656429 >type=USER_ACCT msg=audit(1171506601.837:67485): user pid=28218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171506601.837:67486): login pid=28218 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171506601.839:67487): user pid=28219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171506601.840:67488): login pid=28219 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171506601.840:67489): user pid=28218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171506601.840:67490): user pid=28218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171506601.847:67491): user pid=28219 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171506601.847:67492): user pid=28219 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171506601.859:67493): user pid=28218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171506601.859:67494): user pid=28218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171506901.187:67495): user pid=28264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171506901.187:67496): login pid=28264 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171506901.191:67497): user pid=28264 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171506901.191:67498): user pid=28264 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171507201.516:67499): user pid=28297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171507201.517:67500): login pid=28297 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171507201.517:67501): user pid=28298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171507201.517:67502): login pid=28298 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171507201.522:67503): user pid=28297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171507201.522:67504): user pid=28297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171507201.523:67505): user pid=28298 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171507201.523:67506): user pid=28298 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171507201.547:67507): user pid=28297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171507201.547:67508): user pid=28297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171507501.853:67509): user pid=28335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171507501.853:67510): login pid=28335 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171507501.857:67511): user pid=28335 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171507501.857:67512): user pid=28335 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171507801.179:67513): user pid=28367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171507801.180:67514): login pid=28367 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171507801.180:67515): user pid=28368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171507801.180:67516): login pid=28368 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171507801.185:67517): user pid=28367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171507801.185:67518): user pid=28367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171507801.189:67519): user pid=28368 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171507801.189:67520): user pid=28368 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171507801.205:67521): user pid=28367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171507801.205:67522): user pid=28367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171508101.524:67523): user pid=28401 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171508101.525:67524): login pid=28401 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171508101.528:67525): user pid=28401 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171508101.529:67526): user pid=28401 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171508366.750:67527): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1171508366.750:67528): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1171508376.046:67529): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171508376.047:67530): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171508376.056:67531): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171508376.063:67532): login pid=30241 uid=0 old auid=1000 new auid=1000 >type=USER_START msg=audit(1171508376.073:67533): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171508376.074:67534): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1171508401.369:67535): user pid=28653 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171508401.369:67536): user pid=28653 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1171508401.380:67537): user pid=28653 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1171508401.380:67538): user pid=28653 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1171508401.854:67539): user pid=28693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171508401.854:67540): user pid=28694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171508401.854:67541): login pid=28693 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171508401.854:67542): login pid=28694 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171508401.860:67543): user pid=28694 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171508401.860:67544): user pid=28694 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171508401.865:67545): user pid=28693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171508401.865:67546): user pid=28693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171508401.889:67547): user pid=28693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171508401.889:67548): user pid=28693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171508413.607:67549): user pid=28736 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1171508413.607:67550): user pid=28736 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1171508413.616:67551): user pid=28736 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1171508413.616:67552): user pid=28736 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1171508449.329:67553): user pid=28808 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1171508449.329:67554): user pid=28808 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1171508449.337:67555): user pid=28808 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1171508449.338:67556): user pid=28808 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1171508461.197:67557): user pid=28849 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171508461.197:67558): login pid=28849 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171508461.201:67559): user pid=28849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171508461.201:67560): user pid=28849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171508462.104:67561): user pid=28849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171508462.105:67562): user pid=28849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171508473.237:67563): user pid=28891 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1171508473.237:67564): user pid=28891 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1171508473.245:67565): user pid=28891 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1171508473.246:67566): user pid=28891 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1171508701.115:67567): user pid=28959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171508701.115:67568): login pid=28959 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171508701.120:67569): user pid=28959 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171508701.120:67570): user pid=28959 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171509001.465:67571): user pid=29000 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171509001.466:67572): login pid=29000 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171509001.467:67573): user pid=29001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171509001.467:67574): login pid=29001 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171509001.469:67575): user pid=29000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171509001.469:67576): user pid=29000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171509001.480:67577): user pid=29001 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171509001.480:67578): user pid=29001 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171509001.493:67579): user pid=29000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171509001.493:67580): user pid=29000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171509261.328:67581): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171509261.329:67582): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171509261.371:67583): user pid=28653 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1171509261.372:67584): user pid=28653 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1171509261.373:67585): user pid=28736 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1171509261.373:67586): user pid=28808 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1171509261.374:67587): user pid=28736 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1171509261.375:67588): user pid=28808 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1171509261.375:67589): user pid=28891 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1171509261.375:67590): user pid=28891 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=MAC_CONFIG_CHANGE msg=audit(1171509283.058:67591): bool=allow_ypbind val=0 old_val=1 auid=4294967295 >type=SYSCALL msg=audit(1171509283.058:67591): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7ffff01faab0 a2=2 a3=3 items=0 ppid=29654 pid=29665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171509283.798:67592): avc: denied { search } for pid=29667 comm="genhomedircon" name="yp" dev=dm-0 ino=24969261 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:var_yp_t:s0 tclass=dir >type=AVC msg=audit(1171509283.798:67592): avc: denied { read } for pid=29667 comm="genhomedircon" name="highley-recommended.com.2" dev=dm-0 ino=24970471 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:var_yp_t:s0 tclass=file >type=SYSCALL msg=audit(1171509283.798:67592): arch=c000003e syscall=2 success=yes exit=5 a0=7fffbbefdcc0 a1=0 a2=29 a3=0 items=0 ppid=29665 pid=29667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171509283.798:67593): avc: denied { name_bind } for pid=29667 comm="genhomedircon" src=1011 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket >type=AVC msg=audit(1171509283.798:67593): avc: denied { node_bind } for pid=29667 comm="genhomedircon" src=1011 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=udp_socket >type=AVC msg=audit(1171509283.798:67593): avc: denied { net_bind_service } for pid=29667 comm="genhomedircon" capability=10 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:semanage_t:s0 tclass=capability >type=SYSCALL msg=audit(1171509283.798:67593): arch=c000003e syscall=49 success=yes exit=0 a0=6 a1=7fffbbefdb40 a2=10 a3=3 items=0 ppid=29665 pid=29667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171509283.798:67594): avc: denied { node_bind } for pid=29667 comm="genhomedircon" scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1171509283.798:67594): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fffbbefdc20 a2=10 a3=3 items=0 ppid=29665 pid=29667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171509283.798:67595): avc: denied { name_connect } for pid=29667 comm="genhomedircon" dest=111 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket >type=AVC msg=audit(1171509283.798:67595): avc: denied { send_msg } for pid=29667 comm="genhomedircon" saddr=10.2.2.7 src=56184 daddr=10.2.2.7 dest=111 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket >type=AVC msg=audit(1171509283.798:67595): avc: denied { recv_msg } for pid=29667 comm="genhomedircon" saddr=10.2.2.7 src=111 daddr=10.2.2.7 dest=56184 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1171509283.798:67595): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=7fffbbefddf0 a2=10 a3=3 items=0 ppid=29665 pid=29667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171509283.799:67596): avc: denied { name_bind } for pid=29667 comm="genhomedircon" src=1012 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1171509283.799:67596): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fffbbefdc90 a2=10 a3=7fffbbefdb1c items=0 ppid=29665 pid=29667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171509283.799:67597): avc: denied { name_connect } for pid=29667 comm="genhomedircon" dest=857 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket >type=AVC msg=audit(1171509283.799:67597): avc: denied { send_msg } for pid=29667 comm="genhomedircon" saddr=10.2.2.7 src=1012 daddr=10.2.2.7 dest=857 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket >type=AVC msg=audit(1171509283.799:67597): avc: denied { recv_msg } for pid=29667 comm="genhomedircon" saddr=10.2.2.7 src=857 daddr=10.2.2.7 dest=1012 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1171509283.799:67597): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=7fffbbefddf0 a2=10 a3=7fffbbefdb1c items=0 ppid=29665 pid=29667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=DAEMON_END msg=audit(1171509284.786:93) auditd normal halt, sending auid=4294967295 pid=29795 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1943 >type=DAEMON_START msg=audit(1171509373.031:4699) auditd start, ver=1.4, format=raw, auid=4294967295 pid=2562 res=success, auditd pid=2562 >type=CONFIG_CHANGE msg=audit(1171509373.131:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 >type=CONFIG_CHANGE msg=audit(1171509373.152:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 >type=MAC_CONFIG_CHANGE msg=audit(1171509374.950:6): bool=allow_ypbind val=1 old_val=0 auid=4294967295 >type=SYSCALL msg=audit(1171509374.950:6): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffde0df9a0 a2=2 a3=3 items=0 ppid=2818 pid=2825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:semanage_t:s0 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1171509376.877:7): user pid=2907 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Officejet_7300_fax uri=hpfax:/net/Officejet_7300_series?ip=10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1171509376.905:8): user pid=2907 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=pineneedle uri=socket://10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)' >type=USER_START msg=audit(1171509379.086:9): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session open acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1171509379.086:10): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1171509379.555:11): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1171509379.555:12): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session close acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1171509380.819:13): user pid=3201 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session open acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1171509380.819:14): user pid=3201 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1171509380.911:15): user pid=3201 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1171509380.912:16): user pid=3201 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session close acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=AVC msg=audit(1171509382.921:17): avc: denied { search } for pid=3303 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171509382.921:17): avc: denied { write } for pid=3303 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171509382.921:17): avc: denied { add_name } for pid=3303 comm="pyzor" name="L1ICHK" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171509382.921:17): avc: denied { create } for pid=3303 comm="pyzor" name="L1ICHK" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171509382.921:17): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3190 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171509382.922:18): avc: denied { getattr } for pid=3303 comm="pyzor" name="L1ICHK" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171509382.922:18): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe3b17320 a2=7fffe3b17320 a3=2 items=0 ppid=3190 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171509382.922:18): path="/tmp/L1ICHK" >type=AVC msg=audit(1171509382.922:19): avc: denied { write } for pid=3303 comm="pyzor" name="L1ICHK" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171509382.922:19): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaeeff1a4 items=0 ppid=3190 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171509382.922:19): path="/tmp/L1ICHK" >type=AVC msg=audit(1171509382.922:20): avc: denied { remove_name } for pid=3303 comm="pyzor" name="L1ICHK" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171509382.922:20): avc: denied { unlink } for pid=3303 comm="pyzor" name="L1ICHK" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171509382.922:20): arch=c000003e syscall=87 success=yes exit=0 a0=61d5b0 a1=6c6280 a2=37a8f2f4d8 a3=61d5b0 items=0 ppid=3190 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171509382.923:21): avc: denied { read } for pid=3303 comm="pyzor" name="tmpKYLnt0" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171509382.923:21): arch=c000003e syscall=0 success=yes exit=1120 a0=4 a1=2aaaaf34d000 a2=1000 a3=e0 items=0 ppid=3190 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171509382.923:21): path=2F746D702F746D704B594C6E7430202864656C6574656429 >type=AVC msg=audit(1171509387.708:22): avc: denied { signal } for pid=3190 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171509387.708:22): arch=c000003e syscall=62 success=yes exit=0 a0=ce7 a1=f a2=54 a3=0 items=0 ppid=1 pid=3190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ERR msg=audit(1171509396.957:23): user pid=3604 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1171509425.457:24): user pid=3704 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171509425.458:25): user pid=3704 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171509425.461:26): user pid=3704 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171509425.463:27): login pid=3704 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171509425.472:28): user pid=3704 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171509425.473:29): user pid=3704 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1171509465.474:30): user pid=4014 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1171509465.475:31): user pid=4014 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1171509465.509:32): user pid=4014 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1171509465.509:33): user pid=4014 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1171509479.280:34): user pid=4052 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1171509479.280:35): user pid=4052 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1171509479.356:36): user pid=4052 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1171509479.356:37): user pid=4052 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1171509495.717:38): user pid=4094 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1171509495.717:39): user pid=4094 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1171509495.725:40): user pid=4094 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1171509495.725:41): user pid=4094 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1171509514.546:42): user pid=4163 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1171509514.547:43): user pid=4163 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1171509514.556:44): user pid=4163 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1171509514.556:45): user pid=4163 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1171509601.144:46): user pid=4211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171509601.145:47): user pid=4210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171509601.145:48): login pid=4211 uid=0 old auid=4294967295 new auid=111 >type=LOGIN msg=audit(1171509601.145:49): login pid=4210 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171509601.150:50): user pid=4210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171509601.150:51): user pid=4210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171509601.151:52): user pid=4211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171509601.151:53): user pid=4211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171509601.186:54): user pid=4210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171509601.187:55): user pid=4210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171509901.817:56): user pid=5119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171509901.818:57): login pid=5119 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171509901.822:58): user pid=5119 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171509901.822:59): user pid=5119 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171509932.192:60): user pid=4052 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1171509932.193:61): user pid=4052 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_CHAUTHTOK msg=audit(1171509936.931:62): user pid=5163 uid=0 auid=1000 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=xttpd exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/3 res=failed)' >type=CRED_DISP msg=audit(1171509976.855:63): user pid=4014 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1171509976.857:64): user pid=4014 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1171510152.767:65): user pid=5298 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1171510152.768:66): user pid=5298 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1171510152.819:67): user pid=5298 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1171510201.305:68): user pid=5309 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171510201.305:69): user pid=5310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171510201.306:70): login pid=5309 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171510201.306:71): login pid=5310 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171510201.311:72): user pid=5309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171510201.311:73): user pid=5309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171510201.313:74): user pid=5310 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171510201.313:75): user pid=5310 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171510201.344:76): user pid=5309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171510201.344:77): user pid=5309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171510288.466:78): user pid=5298 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1171510501.672:79): user pid=5356 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171510501.672:80): login pid=5356 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171510501.676:81): user pid=5356 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171510501.676:82): user pid=5356 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171510801.013:83): user pid=5391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171510801.013:84): login pid=5391 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171510801.015:85): user pid=5392 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171510801.015:86): login pid=5392 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171510801.017:87): user pid=5391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171510801.017:88): user pid=5391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171510801.021:89): user pid=5392 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171510801.021:90): user pid=5392 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171510801.034:91): user pid=5391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171510801.034:92): user pid=5391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171511101.365:93): user pid=5434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171511101.366:94): login pid=5434 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171511101.370:95): user pid=5434 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171511101.370:96): user pid=5434 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171511145.382:97): user pid=5484 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171511145.382:98): user pid=5484 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171511259.725:99): user pid=5581 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171511259.725:100): user pid=5581 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171511317.092:101): user pid=5612 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171511317.092:102): user pid=5612 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=AVC msg=audit(1171511317.101:103): avc: denied { lock } for pid=5613 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171511317.101:103): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffffe9a4e00 a3=0 items=0 ppid=3121 pid=5613 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null) >type=AVC_PATH msg=audit(1171511317.101:103): path="/home/dhighley/Mail/Trash" >type=CRED_DISP msg=audit(1171511378.460:104): user pid=4163 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1171511378.461:105): user pid=4163 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1171511401.695:106): user pid=5627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171511401.696:107): login pid=5627 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171511401.698:108): user pid=5628 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171511401.698:109): login pid=5628 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171511401.702:110): user pid=5627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171511401.702:111): user pid=5627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171511401.705:112): user pid=5628 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171511401.705:113): user pid=5628 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171511401.733:114): user pid=5627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171511401.733:115): user pid=5627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171511431.003:116): user pid=5676 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171511431.003:117): user pid=5676 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171511445.722:118): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171511445.722:119): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=CRED_DISP msg=audit(1171511692.752:120): user pid=4094 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1171511692.752:121): user pid=4094 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1171511701.054:122): user pid=5727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171511701.054:123): login pid=5727 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171511701.058:124): user pid=5727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171511701.058:125): user pid=5727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171511707.454:126): user pid=3704 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171511707.455:127): user pid=3704 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=MAC_CONFIG_CHANGE msg=audit(1171511738.509:128): bool=allow_ypbind val=0 old_val=1 auid=4294967295 >type=SYSCALL msg=audit(1171511738.509:128): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff5bc03030 a2=2 a3=3 items=0 ppid=6413 pid=6424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171511738.984:129): avc: denied { search } for pid=6426 comm="genhomedircon" name="yp" dev=dm-0 ino=24969261 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:var_yp_t:s0 tclass=dir >type=AVC msg=audit(1171511738.984:129): avc: denied { read } for pid=6426 comm="genhomedircon" name="highley-recommended.com.2" dev=dm-0 ino=24970466 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:var_yp_t:s0 tclass=file >type=SYSCALL msg=audit(1171511738.984:129): arch=c000003e syscall=2 success=yes exit=5 a0=7fffb1c089d0 a1=0 a2=29 a3=0 items=0 ppid=6424 pid=6426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171511738.984:130): avc: denied { name_bind } for pid=6426 comm="genhomedircon" src=666 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket >type=AVC msg=audit(1171511738.984:130): avc: denied { node_bind } for pid=6426 comm="genhomedircon" src=666 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=udp_socket >type=AVC msg=audit(1171511738.984:130): avc: denied { net_bind_service } for pid=6426 comm="genhomedircon" capability=10 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:semanage_t:s0 tclass=capability >type=SYSCALL msg=audit(1171511738.984:130): arch=c000003e syscall=49 success=yes exit=0 a0=6 a1=7fffb1c08850 a2=10 a3=3 items=0 ppid=6424 pid=6426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171511738.984:131): avc: denied { node_bind } for pid=6426 comm="genhomedircon" scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1171511738.984:131): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fffb1c08930 a2=10 a3=3 items=0 ppid=6424 pid=6426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171511738.985:132): avc: denied { name_connect } for pid=6426 comm="genhomedircon" dest=111 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket >type=AVC msg=audit(1171511738.985:132): avc: denied { send_msg } for pid=6426 comm="genhomedircon" saddr=10.2.2.7 src=32867 daddr=10.2.2.7 dest=111 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket >type=AVC msg=audit(1171511738.985:132): avc: denied { recv_msg } for pid=6426 comm="genhomedircon" saddr=10.2.2.7 src=111 daddr=10.2.2.7 dest=32867 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1171511738.985:132): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=7fffb1c08b00 a2=10 a3=3 items=0 ppid=6424 pid=6426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171511738.985:133): avc: denied { name_bind } for pid=6426 comm="genhomedircon" src=667 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1171511738.985:133): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fffb1c089a0 a2=10 a3=7fffb1c0882c items=0 ppid=6424 pid=6426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171511738.985:134): avc: denied { name_connect } for pid=6426 comm="genhomedircon" dest=875 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket >type=AVC msg=audit(1171511738.985:134): avc: denied { send_msg } for pid=6426 comm="genhomedircon" saddr=10.2.2.7 src=667 daddr=10.2.2.7 dest=875 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket >type=AVC msg=audit(1171511738.985:134): avc: denied { recv_msg } for pid=6426 comm="genhomedircon" saddr=10.2.2.7 src=875 daddr=10.2.2.7 dest=667 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1171511738.985:134): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=7fffb1c08b00 a2=10 a3=7fffb1c0882c items=0 ppid=6424 pid=6426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=DAEMON_END msg=audit(1171511739.875:4700) auditd normal halt, sending auid=4294967295 pid=6554 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2562 >type=DAEMON_START msg=audit(1171511813.756:7471) auditd start, ver=1.4, format=raw, auid=4294967295 pid=2414 res=success, auditd pid=2414 >type=CONFIG_CHANGE msg=audit(1171511813.856:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 >type=CONFIG_CHANGE msg=audit(1171511813.876:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 >type=MAC_CONFIG_CHANGE msg=audit(1171511815.560:6): bool=allow_ypbind val=1 old_val=0 auid=4294967295 >type=SYSCALL msg=audit(1171511815.560:6): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffdcf71830 a2=2 a3=3 items=0 ppid=2670 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:semanage_t:s0 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1171511817.512:7): user pid=2759 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Officejet_7300_fax uri=hpfax:/net/Officejet_7300_series?ip=10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1171511817.545:8): user pid=2759 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=pineneedle uri=socket://10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)' >type=USER_START msg=audit(1171511819.712:9): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session open acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1171511819.712:10): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1171511820.160:11): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1171511820.161:12): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session close acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1171511821.431:13): user pid=3053 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session open acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1171511821.431:14): user pid=3053 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1171511821.515:15): user pid=3053 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1171511821.516:16): user pid=3053 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session close acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=AVC msg=audit(1171511823.475:17): avc: denied { search } for pid=3154 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171511823.475:17): avc: denied { write } for pid=3154 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171511823.475:17): avc: denied { add_name } for pid=3154 comm="pyzor" name="AsFy-T" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171511823.475:17): avc: denied { create } for pid=3154 comm="pyzor" name="AsFy-T" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171511823.475:17): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3042 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171511823.475:18): avc: denied { getattr } for pid=3154 comm="pyzor" name="AsFy-T" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171511823.475:18): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffff161be20 a2=7ffff161be20 a3=2 items=0 ppid=3042 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171511823.475:18): path="/tmp/AsFy-T" >type=AVC msg=audit(1171511823.475:19): avc: denied { write } for pid=3154 comm="pyzor" name="AsFy-T" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171511823.475:19): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cffb4 items=0 ppid=3042 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171511823.475:19): path="/tmp/AsFy-T" >type=AVC msg=audit(1171511823.475:20): avc: denied { remove_name } for pid=3154 comm="pyzor" name="AsFy-T" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171511823.475:20): avc: denied { unlink } for pid=3154 comm="pyzor" name="AsFy-T" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171511823.475:20): arch=c000003e syscall=87 success=yes exit=0 a0=61d5b0 a1=6c6280 a2=37a8f2f4d8 a3=61d5b0 items=0 ppid=3042 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171511823.477:21): avc: denied { read } for pid=3154 comm="pyzor" name="tmpTnFKzW" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171511823.477:21): arch=c000003e syscall=0 success=yes exit=1120 a0=4 a1=2aaaaf34d000 a2=1000 a3=e0 items=0 ppid=3042 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171511823.477:21): path=2F746D702F746D70546E464B7A57202864656C6574656429 >type=AVC msg=audit(1171511828.317:22): avc: denied { signal } for pid=3042 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171511828.317:22): arch=c000003e syscall=62 success=yes exit=0 a0=c52 a1=f a2=54 a3=0 items=0 ppid=1 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ERR msg=audit(1171511836.304:23): user pid=3455 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1171511847.543:24): user pid=3545 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171511847.544:25): user pid=3545 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171511847.547:26): user pid=3545 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171511847.548:27): login pid=3545 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171511847.557:28): user pid=3545 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171511847.558:29): user pid=3545 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1171511885.353:30): user pid=3819 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1171511885.353:31): user pid=3819 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1171511885.392:32): user pid=3819 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1171511885.392:33): user pid=3819 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1171511949.414:34): user pid=3819 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1171511949.414:35): user pid=3819 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1171511956.797:36): user pid=3545 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171511956.798:37): user pid=3545 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=MAC_CONFIG_CHANGE msg=audit(1171511993.537:38): bool=allow_ypbind val=0 old_val=1 auid=4294967295 >type=SYSCALL msg=audit(1171511993.537:38): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff249f92b0 a2=2 a3=3 items=0 ppid=5617 pid=5628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171511993.781:39): avc: denied { search } for pid=5630 comm="genhomedircon" name="yp" dev=dm-0 ino=24969261 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:var_yp_t:s0 tclass=dir >type=AVC msg=audit(1171511993.781:39): avc: denied { read } for pid=5630 comm="genhomedircon" name="highley-recommended.com.2" dev=dm-0 ino=24970464 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:var_yp_t:s0 tclass=file >type=SYSCALL msg=audit(1171511993.781:39): arch=c000003e syscall=2 success=yes exit=5 a0=7fff9ad55b20 a1=0 a2=29 a3=0 items=0 ppid=5628 pid=5630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171511993.782:40): avc: denied { name_bind } for pid=5630 comm="genhomedircon" src=718 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket >type=AVC msg=audit(1171511993.782:40): avc: denied { node_bind } for pid=5630 comm="genhomedircon" src=718 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=udp_socket >type=AVC msg=audit(1171511993.782:40): avc: denied { net_bind_service } for pid=5630 comm="genhomedircon" capability=10 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:semanage_t:s0 tclass=capability >type=SYSCALL msg=audit(1171511993.782:40): arch=c000003e syscall=49 success=yes exit=0 a0=6 a1=7fff9ad559a0 a2=10 a3=3 items=0 ppid=5628 pid=5630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171511993.782:41): avc: denied { node_bind } for pid=5630 comm="genhomedircon" scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1171511993.782:41): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fff9ad55a80 a2=10 a3=3 items=0 ppid=5628 pid=5630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171511993.783:42): avc: denied { name_connect } for pid=5630 comm="genhomedircon" dest=111 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket >type=AVC msg=audit(1171511993.783:42): avc: denied { send_msg } for pid=5630 comm="genhomedircon" saddr=10.2.2.7 src=58371 daddr=10.2.2.7 dest=111 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket >type=AVC msg=audit(1171511993.783:42): avc: denied { recv_msg } for pid=5630 comm="genhomedircon" saddr=10.2.2.7 src=111 daddr=10.2.2.7 dest=58371 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1171511993.783:42): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=7fff9ad55c50 a2=10 a3=3 items=0 ppid=5628 pid=5630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171511993.783:43): avc: denied { name_bind } for pid=5630 comm="genhomedircon" src=719 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1171511993.783:43): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fff9ad55af0 a2=10 a3=7fff9ad5597c items=0 ppid=5628 pid=5630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=AVC msg=audit(1171511993.783:44): avc: denied { name_connect } for pid=5630 comm="genhomedircon" dest=727 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket >type=AVC msg=audit(1171511993.783:44): avc: denied { send_msg } for pid=5630 comm="genhomedircon" saddr=10.2.2.7 src=719 daddr=10.2.2.7 dest=727 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket >type=AVC msg=audit(1171511993.783:44): avc: denied { recv_msg } for pid=5630 comm="genhomedircon" saddr=10.2.2.7 src=727 daddr=10.2.2.7 dest=719 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1171511993.783:44): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=7fff9ad55c50 a2=10 a3=7fff9ad5597c items=0 ppid=5628 pid=5630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) >type=DAEMON_END msg=audit(1171511994.615:7472) auditd normal halt, sending auid=4294967295 pid=5758 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2414 >type=DAEMON_START msg=audit(1171512080.549:682) auditd start, ver=1.4, format=raw, auid=4294967295 pid=2546 res=success, auditd pid=2546 >type=CONFIG_CHANGE msg=audit(1171512080.649:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 >type=CONFIG_CHANGE msg=audit(1171512080.660:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 >type=MAC_CONFIG_CHANGE msg=audit(1171512082.353:6): bool=allow_ypbind val=1 old_val=0 auid=4294967295 >type=SYSCALL msg=audit(1171512082.353:6): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff59b69420 a2=2 a3=3 items=0 ppid=2802 pid=2809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:semanage_t:s0 key=(null) >type=LABEL_LEVEL_CHANGE msg=audit(1171512084.277:7): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Officejet_7300_fax uri=hpfax:/net/Officejet_7300_series?ip=10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1171512084.303:8): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=pineneedle uri=socket://10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)' >type=USER_START msg=audit(1171512086.443:9): user pid=3126 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session open acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1171512086.443:10): user pid=3126 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1171512086.901:11): user pid=3126 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1171512086.901:12): user pid=3126 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session close acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1171512088.185:13): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session open acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1171512088.185:14): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1171512088.261:15): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1171512088.261:16): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session close acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=AVC msg=audit(1171512089.785:17): avc: denied { search } for pid=3272 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171512089.785:17): avc: denied { write } for pid=3272 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171512089.785:17): avc: denied { add_name } for pid=3272 comm="pyzor" name="We8gcx" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171512089.785:17): avc: denied { create } for pid=3272 comm="pyzor" name="We8gcx" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171512089.785:17): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3175 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171512089.785:18): avc: denied { getattr } for pid=3272 comm="pyzor" name="We8gcx" dev=dm-0 ino=30703625 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171512089.785:18): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff77ccb4d0 a2=7fff77ccb4d0 a3=2 items=0 ppid=3175 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171512089.785:18): path="/tmp/We8gcx" >type=AVC msg=audit(1171512089.785:19): avc: denied { write } for pid=3272 comm="pyzor" name="We8gcx" dev=dm-0 ino=30703625 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171512089.785:19): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cffb4 items=0 ppid=3175 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171512089.785:19): path="/tmp/We8gcx" >type=AVC msg=audit(1171512089.786:20): avc: denied { remove_name } for pid=3272 comm="pyzor" name="We8gcx" dev=dm-0 ino=30703625 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171512089.786:20): avc: denied { unlink } for pid=3272 comm="pyzor" name="We8gcx" dev=dm-0 ino=30703625 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171512089.786:20): arch=c000003e syscall=87 success=yes exit=0 a0=61d5b0 a1=6c6280 a2=37a8f2f4d8 a3=61d5b0 items=0 ppid=3175 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171512089.787:21): avc: denied { read } for pid=3272 comm="pyzor" name="tmprxWA4i" dev=dm-0 ino=30703625 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171512089.787:21): arch=c000003e syscall=0 success=yes exit=1120 a0=4 a1=2aaaaf34d000 a2=1000 a3=e0 items=0 ppid=3175 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171512089.787:21): path=2F746D702F746D70727857413469202864656C6574656429 >type=AVC msg=audit(1171512094.665:22): avc: denied { signal } for pid=3175 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171512094.665:22): arch=c000003e syscall=62 success=yes exit=0 a0=cc8 a1=f a2=54 a3=0 items=0 ppid=1 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ERR msg=audit(1171512104.472:23): user pid=3592 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1171512217.696:24): user pid=3689 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171512217.696:25): user pid=3689 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171512217.700:26): user pid=3689 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171512217.701:27): login pid=3689 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171512217.712:28): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171512217.712:29): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171512301.296:30): user pid=3969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171512301.297:31): login pid=3969 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171512301.301:32): user pid=3969 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171512301.301:33): user pid=3969 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171512487.006:34): avc: denied { getattr } for pid=4034 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171512487.006:34): arch=c000003e syscall=4 success=yes exit=0 a0=8c4490 a1=7fff656aad00 a2=7fff656aad00 a3=3 items=0 ppid=3289 pid=4034 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171512487.006:34): path="/bin/hostname" >type=AVC msg=audit(1171512487.007:35): avc: denied { execute } for pid=4034 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171512487.007:35): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=1 a2=0 a3=3 items=0 ppid=3289 pid=4034 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1171512487.007:36): avc: denied { read } for pid=4034 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171512487.007:36): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=4 a2=0 a3=3 items=0 ppid=3289 pid=4034 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC msg=audit(1171512487.007:37): avc: denied { execute_no_trans } for pid=4034 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1171512487.007:37): arch=c000003e syscall=59 success=yes exit=0 a0=8c4490 a1=8c4bc0 a2=8c4750 a3=8 items=0 ppid=3289 pid=4034 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="hostname" exe="/bin/hostname" subj=system_u:system_r:httpd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171512487.007:37): path="/bin/hostname" >type=USER_ACCT msg=audit(1171512601.973:38): user pid=4056 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171512601.973:39): login pid=4056 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171512601.976:40): user pid=4057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171512601.976:41): login pid=4057 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171512601.978:42): user pid=4056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171512601.978:43): user pid=4056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171512601.986:44): user pid=4057 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171512601.986:45): user pid=4057 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171512602.038:46): user pid=4056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171512602.038:47): user pid=4056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171512901.308:48): user pid=4143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171512901.308:49): login pid=4143 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171512901.312:50): user pid=4143 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171512901.312:51): user pid=4143 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171512907.933:52): user pid=4153 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1171512907.933:53): user pid=4153 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1171512907.971:54): user pid=4153 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1171512907.971:55): user pid=4153 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1171513182.076:56): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513182.076:56): arch=c000003e syscall=2 success=yes exit=11 a0=30ffe20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171513182.076:57): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513182.076:57): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513182.076:57): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171513182.089:58): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171513182.089:58): arch=c000003e syscall=2 success=yes exit=8 a0=2d8ecf0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171513182.722:59): avc: denied { search } for pid=4467 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171513182.722:59): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171513182.728:60): avc: denied { getattr } for pid=4467 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171513182.728:60): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff4ea11910 a2=7fff4ea11910 a3=6c6280 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513182.728:60): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171513182.728:61): avc: denied { read } for pid=4467 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171513182.728:61): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171513182.729:62): avc: denied { search } for pid=4467 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171513182.729:62): avc: denied { write } for pid=4467 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171513182.729:62): avc: denied { add_name } for pid=4467 comm="pyzor" name="EqTy59" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171513182.729:62): avc: denied { create } for pid=4467 comm="pyzor" name="EqTy59" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171513182.729:62): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171513182.729:63): avc: denied { getattr } for pid=4467 comm="pyzor" name="EqTy59" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171513182.729:63): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff4ea0fe00 a2=7fff4ea0fe00 a3=3 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513182.729:63): path="/tmp/EqTy59" >type=AVC msg=audit(1171513182.729:64): avc: denied { write } for pid=4467 comm="pyzor" name="EqTy59" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171513182.729:64): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15834 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513182.729:64): path="/tmp/EqTy59" >type=AVC msg=audit(1171513182.729:65): avc: denied { remove_name } for pid=4467 comm="pyzor" name="EqTy59" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171513182.729:65): avc: denied { unlink } for pid=4467 comm="pyzor" name="EqTy59" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171513182.729:65): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171513182.730:66): avc: denied { read } for pid=4467 comm="pyzor" name="tmpGhNm2V" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171513182.730:66): arch=c000003e syscall=0 success=yes exit=685 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513182.730:66): path=2F746D702F746D7047684E6D3256202864656C6574656429 >type=AVC msg=audit(1171513187.685:67): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171513187.685:67): arch=c000003e syscall=62 success=yes exit=0 a0=1173 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171513187.702:68): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634215 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513187.702:68): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513187.702:68): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171513187.702:69): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634215 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513187.702:69): arch=c000003e syscall=86 success=yes exit=0 a0=3037480 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171513187.702:70): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634215 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513187.702:70): arch=c000003e syscall=87 success=yes exit=0 a0=3037480 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171513187.703:71): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171513187.703:71): arch=c000003e syscall=2 success=yes exit=8 a0=2ab07c0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171513187.756:72): avc: denied { write } for pid=4463 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171513187.756:72): avc: denied { add_name } for pid=4463 comm="procmail" name="_vFB.j990FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171513187.756:72): avc: denied { create } for pid=4463 comm="procmail" name="_vFB.j990FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513187.756:72): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=4460 pid=4463 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171513187.757:73): avc: denied { write } for pid=4463 comm="procmail" name="_vFB.j990FB.douglas" dev=dm-0 ino=12484630 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513187.757:73): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b670 items=0 ppid=4460 pid=4463 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513187.757:73): path="/home/dhighley/_vFB.j990FB.douglas" >type=AVC msg=audit(1171513187.757:74): avc: denied { getattr } for pid=4463 comm="procmail" name="_vFB.j990FB.douglas" dev=dm-0 ino=12484630 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513187.757:74): arch=c000003e syscall=4 success=yes exit=0 a0=61b670 a1=7fff582acca0 a2=7fff582acca0 a3=61b670 items=0 ppid=4460 pid=4463 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513187.757:74): path="/home/dhighley/_vFB.j990FB.douglas" >type=AVC msg=audit(1171513187.757:75): avc: denied { link } for pid=4463 comm="procmail" name="_vFB.j990FB.douglas" dev=dm-0 ino=12484630 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513187.757:75): arch=c000003e syscall=86 success=yes exit=0 a0=61b670 a1=61cfb0 a2=7fff582acbc0 a3=61b670 items=0 ppid=4460 pid=4463 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171513187.757:76): avc: denied { remove_name } for pid=4463 comm="procmail" name="_vFB.j990FB.douglas" dev=dm-0 ino=12484630 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171513187.757:76): avc: denied { unlink } for pid=4463 comm="procmail" name="_vFB.j990FB.douglas" dev=dm-0 ino=12484630 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513187.757:76): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61cfb0 a2=7fff582acbc0 a3=61b670 items=0 ppid=4460 pid=4463 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171513187.758:77): avc: denied { append } for pid=4463 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171513187.758:77): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=4460 pid=4463 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1171513188.022:78): user pid=4468 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1171513188.022:79): user pid=4468 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1171513188.029:80): user pid=4468 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1171513188.029:81): user pid=4468 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1171513199.348:82): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171513199.348:82): arch=c000003e syscall=62 success=yes exit=0 a0=11a4 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171513201.634:83): user pid=4517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171513201.634:84): user pid=4518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171513201.634:85): login pid=4518 uid=0 old auid=4294967295 new auid=111 >type=LOGIN msg=audit(1171513201.635:86): login pid=4517 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171513201.640:87): user pid=4518 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171513201.640:88): user pid=4518 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171513201.642:89): user pid=4517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171513201.642:90): user pid=4517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171513201.666:91): user pid=4517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171513201.667:92): user pid=4517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171513240.627:93): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513240.627:93): arch=c000003e syscall=2 success=yes exit=11 a0=323ead0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171513240.628:94): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513240.628:94): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513240.628:94): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171513240.634:95): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171513240.634:95): arch=c000003e syscall=2 success=yes exit=8 a0=1ceb970 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171513241.121:96): avc: denied { getattr } for pid=4542 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171513241.121:96): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb1c27b20 a2=7fffb1c27b20 a3=6c6280 items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513241.121:96): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171513241.121:97): avc: denied { read } for pid=4542 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171513241.121:97): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171513241.122:98): avc: denied { search } for pid=4542 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171513241.122:98): avc: denied { write } for pid=4542 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171513241.122:98): avc: denied { add_name } for pid=4542 comm="pyzor" name="nz_VVw" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171513241.122:98): avc: denied { create } for pid=4542 comm="pyzor" name="nz_VVw" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171513241.122:98): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171513241.122:99): avc: denied { getattr } for pid=4542 comm="pyzor" name="nz_VVw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171513241.122:99): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb1c26420 a2=7fffb1c26420 a3=2 items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513241.122:99): path="/tmp/nz_VVw" >type=AVC msg=audit(1171513241.122:100): avc: denied { write } for pid=4542 comm="pyzor" name="nz_VVw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171513241.122:100): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513241.122:100): path="/tmp/nz_VVw" >type=AVC msg=audit(1171513241.122:101): avc: denied { remove_name } for pid=4542 comm="pyzor" name="nz_VVw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171513241.122:101): avc: denied { unlink } for pid=4542 comm="pyzor" name="nz_VVw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171513241.122:101): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6c6280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171513241.124:102): avc: denied { read } for pid=4542 comm="pyzor" name="tmpRdgCAg" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171513241.124:102): arch=c000003e syscall=0 success=yes exit=464 a0=4 a1=2aaaaf34d000 a2=1000 a3=4f items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513241.124:102): path=2F746D702F746D70526467434167202864656C6574656429 >type=AVC msg=audit(1171513246.373:103): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634215 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513246.373:103): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171513246.373:103): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171513246.374:104): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634215 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513246.374:104): arch=c000003e syscall=86 success=yes exit=0 a0=321a4a0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171513246.374:105): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634215 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171513246.374:105): arch=c000003e syscall=87 success=yes exit=0 a0=321a4a0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171513246.375:106): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171513246.375:106): arch=c000003e syscall=2 success=yes exit=8 a0=3214800 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171513289.871:107): avc: denied { search } for pid=4556 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171513289.871:107): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4556 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171513295.304:108): avc: denied { append } for pid=4552 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171513295.304:108): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=4549 pid=4552 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171513501.975:109): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171513501.975:110): login pid=4627 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171513501.979:111): user pid=4627 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171513501.979:112): user pid=4627 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171513566.664:113): user pid=4468 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1171513566.665:114): user pid=4468 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1171513801.298:115): user pid=4706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171513801.298:116): login pid=4706 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171513801.299:117): user pid=4705 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171513801.300:118): login pid=4705 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171513801.302:119): user pid=4706 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171513801.302:120): user pid=4706 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171513801.305:121): user pid=4705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171513801.305:122): user pid=4705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171513801.323:123): user pid=4705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171513801.323:124): user pid=4705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171514101.625:125): user pid=4779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171514101.625:126): login pid=4779 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171514101.627:127): user pid=4779 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171514101.628:128): user pid=4779 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171514211.005:129): user pid=4153 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1171514211.006:130): user pid=4153 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1171514229.537:131): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171514229.538:132): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1171514244.477:133): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171514244.478:134): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171514244.482:135): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171514244.488:136): login pid=3689 uid=0 old auid=1000 new auid=1000 >type=USER_START msg=audit(1171514244.496:137): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171514244.497:138): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_END msg=audit(1171514264.520:139): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171514264.520:140): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1171514278.888:141): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171514278.888:142): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171514278.893:143): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171514278.896:144): login pid=3689 uid=0 old auid=1000 new auid=1000 >type=USER_START msg=audit(1171514278.906:145): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171514278.906:146): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171514401.034:147): user pid=5304 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171514401.034:148): login pid=5304 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171514401.038:149): user pid=5304 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171514401.038:150): user pid=5304 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171514401.040:151): user pid=5303 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171514401.040:152): login pid=5303 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171514401.045:153): user pid=5303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171514401.045:154): user pid=5303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171514401.070:155): user pid=5303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171514401.071:156): user pid=5303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171514701.372:157): user pid=5372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171514701.372:158): login pid=5372 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171514701.376:159): user pid=5372 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171514701.376:160): user pid=5372 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171514940.007:161): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171514940.008:162): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1171514953.431:163): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171514953.431:164): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171514953.436:165): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171514953.441:166): login pid=3689 uid=0 old auid=1000 new auid=0 >type=USER_START msg=audit(1171514953.441:167): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171514953.441:168): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_END msg=audit(1171515000.657:169): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171515000.658:170): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171515001.713:171): user pid=5659 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171515001.714:172): login pid=5659 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171515001.716:173): user pid=5660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171515001.716:174): login pid=5660 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171515001.718:175): user pid=5659 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171515001.718:176): user pid=5659 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171515001.725:177): user pid=5660 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171515001.725:178): user pid=5660 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171515001.741:179): user pid=5659 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171515001.742:180): user pid=5659 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171515017.436:181): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171515017.437:182): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171515017.442:183): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171515017.445:184): login pid=3689 uid=0 old auid=0 new auid=1000 >type=USER_START msg=audit(1171515017.453:185): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171515017.454:186): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1171515044.991:187): user pid=5909 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1171515044.992:188): user pid=5909 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1171515045.004:189): user pid=5909 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1171515045.004:190): user pid=5909 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1171515185.442:191): user pid=5909 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1171515185.442:192): user pid=5909 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1171515203.954:193): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515203.954:193): arch=c000003e syscall=2 success=yes exit=11 a0=3305970 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171515203.954:194): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515203.954:194): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171515203.954:194): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171515203.966:195): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171515203.966:195): arch=c000003e syscall=2 success=yes exit=8 a0=31d2a40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171515204.572:196): avc: denied { search } for pid=5973 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171515204.572:196): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171515204.572:197): avc: denied { getattr } for pid=5973 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171515204.572:197): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffbb850750 a2=7fffbb850750 a3=6c6280 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171515204.572:197): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171515204.572:198): avc: denied { read } for pid=5973 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171515204.572:198): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171515204.573:199): avc: denied { search } for pid=5973 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171515204.573:199): avc: denied { write } for pid=5973 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171515204.573:199): avc: denied { add_name } for pid=5973 comm="pyzor" name="Cc1_7l" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171515204.573:199): avc: denied { create } for pid=5973 comm="pyzor" name="Cc1_7l" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171515204.573:199): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171515204.574:200): avc: denied { getattr } for pid=5973 comm="pyzor" name="Cc1_7l" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171515204.574:200): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffbb84ec40 a2=7fffbb84ec40 a3=3 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171515204.574:200): path="/tmp/Cc1_7l" >type=AVC msg=audit(1171515204.574:201): avc: denied { write } for pid=5973 comm="pyzor" name="Cc1_7l" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171515204.574:201): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15834 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171515204.574:201): path="/tmp/Cc1_7l" >type=AVC msg=audit(1171515204.574:202): avc: denied { remove_name } for pid=5973 comm="pyzor" name="Cc1_7l" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171515204.574:202): avc: denied { unlink } for pid=5973 comm="pyzor" name="Cc1_7l" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171515204.574:202): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171515204.578:203): avc: denied { read } for pid=5973 comm="pyzor" name="tmp2sF7Na" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171515204.578:203): arch=c000003e syscall=0 success=yes exit=2306 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171515204.578:203): path=2F746D702F746D70327346374E61202864656C6574656429 >type=AVC msg=audit(1171515209.535:204): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171515209.535:204): arch=c000003e syscall=62 success=yes exit=0 a0=1755 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171515211.547:205): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634229 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515211.547:205): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171515211.547:205): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171515211.547:206): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634229 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515211.547:206): arch=c000003e syscall=86 success=yes exit=0 a0=32200e0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171515211.547:207): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634229 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515211.547:207): arch=c000003e syscall=87 success=yes exit=0 a0=32200e0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171515211.548:208): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171515211.548:208): arch=c000003e syscall=2 success=yes exit=8 a0=32fe000 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171515211.590:209): avc: denied { write } for pid=5969 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171515211.590:209): avc: denied { add_name } for pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171515211.590:209): avc: denied { create } for pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515211.590:209): arch=c000003e syscall=2 success=yes exit=6 a0=620880 a1=c1 a2=124 a3=620880 items=0 ppid=5966 pid=5969 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171515211.591:210): avc: denied { write } for pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515211.591:210): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=620880 items=0 ppid=5966 pid=5969 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171515211.591:210): path="/home/dhighley/_RdB.Ld-0FB.douglas" >type=AVC msg=audit(1171515211.591:211): avc: denied { getattr } for pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515211.591:211): arch=c000003e syscall=4 success=yes exit=0 a0=620880 a1=7fff03cca6c0 a2=7fff03cca6c0 a3=620880 items=0 ppid=5966 pid=5969 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171515211.591:211): path="/home/dhighley/_RdB.Ld-0FB.douglas" >type=AVC msg=audit(1171515211.591:212): avc: denied { link } for pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515211.591:212): arch=c000003e syscall=86 success=yes exit=0 a0=620880 a1=61b510 a2=7fff03cca5e0 a3=620880 items=0 ppid=5966 pid=5969 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171515211.591:213): avc: denied { remove_name } for pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171515211.591:213): avc: denied { unlink } for pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515211.591:213): arch=c000003e syscall=87 success=yes exit=0 a0=620880 a1=61b510 a2=7fff03cca5e0 a3=620880 items=0 ppid=5966 pid=5969 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171515211.591:214): avc: denied { append } for pid=5969 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171515211.591:214): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=5966 pid=5969 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171515301.359:215): user pid=5989 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171515301.360:216): login pid=5989 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171515301.363:217): user pid=5989 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171515301.363:218): user pid=5989 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171515335.060:219): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515335.060:219): arch=c000003e syscall=2 success=yes exit=11 a0=33c3740 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171515335.060:220): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515335.060:220): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171515335.060:220): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171515335.078:221): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171515335.078:221): arch=c000003e syscall=2 success=yes exit=8 a0=33aecd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171515335.615:222): avc: denied { search } for pid=6011 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171515335.615:222): avc: denied { write } for pid=6011 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171515335.615:222): avc: denied { add_name } for pid=6011 comm="pyzor" name="WOhqR6" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171515335.615:222): avc: denied { create } for pid=6011 comm="pyzor" name="WOhqR6" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171515335.615:222): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=6011 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171515335.615:223): avc: denied { getattr } for pid=6011 comm="pyzor" name="WOhqR6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171515335.615:223): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd6b07870 a2=7fffd6b07870 a3=3 items=0 ppid=3451 pid=6011 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171515335.615:223): path="/tmp/WOhqR6" >type=AVC msg=audit(1171515335.616:224): avc: denied { write } for pid=6011 comm="pyzor" name="WOhqR6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171515335.616:224): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15864 items=0 ppid=3451 pid=6011 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171515335.616:224): path="/tmp/WOhqR6" >type=AVC msg=audit(1171515335.616:225): avc: denied { remove_name } for pid=6011 comm="pyzor" name="WOhqR6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171515335.616:225): avc: denied { unlink } for pid=6011 comm="pyzor" name="WOhqR6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171515335.616:225): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae710 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=6011 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171515335.617:226): avc: denied { read } for pid=6011 comm="pyzor" name="tmp0o-TJ5" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171515335.617:226): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=6011 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171515335.617:226): path=2F746D702F746D70306F2D544A35202864656C6574656429 >type=AVC msg=audit(1171515342.686:227): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634229 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515342.686:227): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171515342.686:227): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171515342.686:228): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634229 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515342.686:228): arch=c000003e syscall=86 success=yes exit=0 a0=3089d90 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171515342.687:229): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634229 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171515342.687:229): arch=c000003e syscall=87 success=yes exit=0 a0=3089d90 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171515342.688:230): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171515342.688:230): arch=c000003e syscall=2 success=yes exit=8 a0=31ae640 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171515342.718:231): avc: denied { append } for pid=6007 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171515342.718:231): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6004 pid=6007 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1171515391.477:232): user pid=6046 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1171515391.478:233): user pid=6046 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1171515391.486:234): user pid=6046 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1171515391.487:235): user pid=6046 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1171515601.691:236): user pid=6099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171515601.691:237): login pid=6099 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171515601.693:238): user pid=6100 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171515601.693:239): login pid=6100 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171515601.695:240): user pid=6101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171515601.695:241): user pid=6099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171515601.695:242): login pid=6101 uid=0 old auid=4294967295 new auid=111 >type=CRED_ACQ msg=audit(1171515601.695:243): user pid=6099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171515601.702:244): user pid=6100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171515601.702:245): user pid=6100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171515601.706:246): user pid=6101 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171515601.706:247): user pid=6101 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171515601.717:248): user pid=6099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171515601.718:249): user pid=6099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171515661.022:250): user pid=6122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171515661.022:251): login pid=6122 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171515661.026:252): user pid=6122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171515661.026:253): user pid=6122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171515662.060:254): user pid=6122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171515662.061:255): user pid=6122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171515710.497:256): user pid=6046 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1171515710.498:257): user pid=6046 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1171515833.285:258): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1171515833.285:259): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171515901.068:260): user pid=6232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171515901.069:261): login pid=6232 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171515901.072:262): user pid=6232 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171515901.072:263): user pid=6232 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171516201.392:264): user pid=6266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171516201.392:265): login pid=6266 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171516201.393:266): user pid=6267 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171516201.393:267): login pid=6267 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171516201.398:268): user pid=6267 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171516201.398:269): user pid=6267 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171516201.403:270): user pid=6266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171516201.403:271): user pid=6266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171516201.426:272): user pid=6266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171516201.426:273): user pid=6266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171516501.724:274): user pid=6302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171516501.725:275): login pid=6302 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171516501.729:276): user pid=6302 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171516501.729:277): user pid=6302 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171516801.055:278): user pid=6335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171516801.055:279): login pid=6335 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171516801.057:280): user pid=6336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171516801.057:281): login pid=6336 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171516801.058:282): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171516801.059:283): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171516801.067:284): user pid=6336 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171516801.067:285): user pid=6336 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171516801.075:286): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171516801.075:287): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171517101.396:288): user pid=6371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171517101.397:289): login pid=6371 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171517101.400:290): user pid=6371 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171517101.400:291): user pid=6371 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171517401.715:292): user pid=6403 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171517401.716:293): login pid=6403 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171517401.717:294): user pid=6404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171517401.717:295): login pid=6404 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171517401.723:296): user pid=6403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171517401.723:297): user pid=6403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171517401.726:298): user pid=6404 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171517401.726:299): user pid=6404 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171517401.741:300): user pid=6403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171517401.741:301): user pid=6403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171517701.057:302): user pid=6442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171517701.057:303): login pid=6442 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171517701.061:304): user pid=6442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171517701.061:305): user pid=6442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171518001.377:306): user pid=6476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171518001.378:307): login pid=6476 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171518001.379:308): user pid=6477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171518001.379:309): login pid=6477 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171518001.381:310): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171518001.381:311): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171518001.387:312): user pid=6477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171518001.387:313): user pid=6477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171518001.401:314): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171518001.401:315): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171518091.203:316): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171518091.203:316): arch=c000003e syscall=2 success=yes exit=11 a0=31bb2a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171518091.203:317): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171518091.203:317): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171518091.203:317): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171518091.209:318): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171518091.209:318): arch=c000003e syscall=2 success=yes exit=8 a0=2fcb6b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171518091.857:319): avc: denied { search } for pid=6508 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171518091.857:319): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171518091.857:320): avc: denied { getattr } for pid=6508 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171518091.857:320): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff4f769660 a2=7fff4f769660 a3=6c6280 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171518091.857:320): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171518091.857:321): avc: denied { read } for pid=6508 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171518091.857:321): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171518091.858:322): avc: denied { search } for pid=6508 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171518091.858:322): avc: denied { write } for pid=6508 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171518091.858:322): avc: denied { add_name } for pid=6508 comm="pyzor" name="ahteRw" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171518091.858:322): avc: denied { create } for pid=6508 comm="pyzor" name="ahteRw" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171518091.858:322): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171518091.858:323): avc: denied { getattr } for pid=6508 comm="pyzor" name="ahteRw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171518091.858:323): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff4f767b50 a2=7fff4f767b50 a3=3 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171518091.858:323): path="/tmp/ahteRw" >type=AVC msg=audit(1171518091.858:324): avc: denied { write } for pid=6508 comm="pyzor" name="ahteRw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171518091.858:324): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef158c4 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171518091.858:324): path="/tmp/ahteRw" >type=AVC msg=audit(1171518091.859:325): avc: denied { remove_name } for pid=6508 comm="pyzor" name="ahteRw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171518091.859:325): avc: denied { unlink } for pid=6508 comm="pyzor" name="ahteRw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171518091.859:325): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171518091.864:326): avc: denied { read } for pid=6508 comm="pyzor" name="tmphANQfj" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171518091.864:326): arch=c000003e syscall=0 success=yes exit=815 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171518091.864:326): path=2F746D702F746D7068414E51666A202864656C6574656429 >type=AVC msg=audit(1171518096.821:327): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171518096.821:327): arch=c000003e syscall=62 success=yes exit=0 a0=196c a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171518096.901:328): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171518096.901:328): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171518096.901:328): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171518096.901:329): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171518096.901:329): arch=c000003e syscall=86 success=yes exit=0 a0=308a660 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171518096.902:330): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171518096.902:330): arch=c000003e syscall=87 success=yes exit=0 a0=308a660 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171518096.902:331): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171518096.902:331): arch=c000003e syscall=2 success=yes exit=8 a0=3220450 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171518096.986:332): avc: denied { write } for pid=6504 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171518096.986:332): avc: denied { add_name } for pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171518096.986:332): avc: denied { create } for pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171518096.986:332): arch=c000003e syscall=2 success=yes exit=6 a0=61c970 a1=c1 a2=124 a3=61c970 items=0 ppid=6499 pid=6504 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171518096.986:333): avc: denied { write } for pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171518096.986:333): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c970 items=0 ppid=6499 pid=6504 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171518096.986:333): path="/home/dhighley/_olB.QK_0FB.douglas" >type=AVC msg=audit(1171518096.986:334): avc: denied { getattr } for pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171518096.986:334): arch=c000003e syscall=4 success=yes exit=0 a0=61c970 a1=7ffffe922320 a2=7ffffe922320 a3=61c970 items=0 ppid=6499 pid=6504 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171518096.986:334): path="/home/dhighley/_olB.QK_0FB.douglas" >type=AVC msg=audit(1171518096.986:335): avc: denied { link } for pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171518096.986:335): arch=c000003e syscall=86 success=yes exit=0 a0=61c970 a1=61b520 a2=7ffffe922240 a3=61c970 items=0 ppid=6499 pid=6504 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171518096.986:336): avc: denied { remove_name } for pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171518096.986:336): avc: denied { unlink } for pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171518096.986:336): arch=c000003e syscall=87 success=yes exit=0 a0=61c970 a1=61b520 a2=7ffffe922240 a3=61c970 items=0 ppid=6499 pid=6504 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171518096.986:337): avc: denied { append } for pid=6504 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171518096.986:337): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6499 pid=6504 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171518232.591:338): avc: denied { search } for pid=6526 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171518232.591:338): avc: denied { write } for pid=6526 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171518232.591:338): avc: denied { add_name } for pid=6526 comm="pyzor" name="n38AsA" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171518232.591:338): avc: denied { create } for pid=6526 comm="pyzor" name="n38AsA" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171518232.591:338): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=6526 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171518232.591:339): avc: denied { getattr } for pid=6526 comm="pyzor" name="n38AsA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171518232.591:339): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff3a67b5f0 a2=7fff3a67b5f0 a3=3 items=0 ppid=3451 pid=6526 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171518232.591:339): path="/tmp/n38AsA" >type=AVC msg=audit(1171518232.591:340): avc: denied { write } for pid=6526 comm="pyzor" name="n38AsA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171518232.591:340): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef158c4 items=0 ppid=3451 pid=6526 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171518232.591:340): path="/tmp/n38AsA" >type=AVC msg=audit(1171518232.591:341): avc: denied { remove_name } for pid=6526 comm="pyzor" name="n38AsA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171518232.591:341): avc: denied { unlink } for pid=6526 comm="pyzor" name="n38AsA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171518232.591:341): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=6526 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171518232.592:342): avc: denied { read } for pid=6526 comm="pyzor" name="tmpYEP4Mn" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171518232.592:342): arch=c000003e syscall=0 success=yes exit=3573 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=6526 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171518232.592:342): path=2F746D702F746D70594550344D6E202864656C6574656429 >type=AVC msg=audit(1171518237.564:343): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171518237.564:343): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171518237.564:343): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171518237.564:344): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171518237.564:344): arch=c000003e syscall=86 success=yes exit=0 a0=3234550 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171518237.564:345): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171518237.564:345): arch=c000003e syscall=87 success=yes exit=0 a0=3234550 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171518237.585:346): avc: denied { append } for pid=6522 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171518237.585:346): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6519 pid=6522 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171518301.706:347): user pid=6532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171518301.707:348): login pid=6532 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171518301.710:349): user pid=6532 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171518301.710:350): user pid=6532 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171518601.034:351): user pid=6568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171518601.034:352): login pid=6568 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171518601.035:353): user pid=6569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171518601.035:354): login pid=6569 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171518601.040:355): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171518601.040:356): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171518601.045:357): user pid=6569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171518601.046:358): user pid=6569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171518601.055:359): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171518601.056:360): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171518901.363:361): user pid=6606 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171518901.364:362): login pid=6606 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171518901.367:363): user pid=6606 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171518901.367:364): user pid=6606 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171519201.691:365): user pid=6638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171519201.691:366): login pid=6638 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171519201.694:367): user pid=6639 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171519201.694:368): login pid=6639 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171519201.694:369): user pid=6638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171519201.694:370): user pid=6638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171519201.697:371): user pid=6639 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171519201.698:372): user pid=6639 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171519201.712:373): user pid=6638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171519201.712:374): user pid=6638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171519261.029:375): user pid=6654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171519261.029:376): login pid=6654 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171519261.033:377): user pid=6654 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171519261.033:378): user pid=6654 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171519261.907:379): user pid=6654 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171519261.908:380): user pid=6654 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171519501.915:381): user pid=6692 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171519501.915:382): login pid=6692 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171519501.919:383): user pid=6692 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171519501.919:384): user pid=6692 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171519801.238:385): user pid=6726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171519801.238:386): login pid=6726 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171519801.239:387): user pid=6725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171519801.239:388): login pid=6725 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171519801.242:389): user pid=6725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171519801.242:390): user pid=6725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171519801.244:391): user pid=6726 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171519801.244:392): user pid=6726 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171519801.260:393): user pid=6725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171519801.260:394): user pid=6725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171520101.564:395): user pid=6761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171520101.564:396): login pid=6761 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171520101.568:397): user pid=6761 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171520101.568:398): user pid=6761 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171520401.885:399): user pid=6799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171520401.885:400): login pid=6799 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171520401.887:401): user pid=6800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171520401.887:402): login pid=6800 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171520401.889:403): user pid=6799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171520401.889:404): user pid=6799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171520401.895:405): user pid=6800 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171520401.895:406): user pid=6800 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171520401.907:407): user pid=6799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171520401.908:408): user pid=6799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171520535.407:409): avc: denied { search } for pid=6833 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171520535.407:409): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=6833 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171520701.214:410): user pid=6850 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171520701.215:411): login pid=6850 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171520701.218:412): user pid=6850 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171520701.218:413): user pid=6850 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171520863.807:414): avc: denied { write } for pid=6877 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171520863.807:414): avc: denied { add_name } for pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171520863.807:414): avc: denied { create } for pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171520863.807:414): arch=c000003e syscall=2 success=yes exit=6 a0=61c600 a1=c1 a2=124 a3=61c600 items=0 ppid=6874 pid=6877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171520863.808:415): avc: denied { write } for pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171520863.808:415): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c600 items=0 ppid=6874 pid=6877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171520863.808:415): path="/home/dhighley/_drB.f1_0FB.douglas" >type=AVC msg=audit(1171520863.808:416): avc: denied { getattr } for pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171520863.808:416): arch=c000003e syscall=4 success=yes exit=0 a0=61c600 a1=7fff2a3c6dc0 a2=7fff2a3c6dc0 a3=61c600 items=0 ppid=6874 pid=6877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171520863.808:416): path="/home/dhighley/_drB.f1_0FB.douglas" >type=AVC msg=audit(1171520863.808:417): avc: denied { link } for pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171520863.808:417): arch=c000003e syscall=86 success=yes exit=0 a0=61c600 a1=61b520 a2=7fff2a3c6ce0 a3=61c600 items=0 ppid=6874 pid=6877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171520863.808:418): avc: denied { remove_name } for pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171520863.808:418): avc: denied { unlink } for pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171520863.808:418): arch=c000003e syscall=87 success=yes exit=0 a0=61c600 a1=61b520 a2=7fff2a3c6ce0 a3=61c600 items=0 ppid=6874 pid=6877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171521001.541:419): user pid=6896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171521001.542:420): login pid=6896 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171521001.543:421): user pid=6897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171521001.543:422): login pid=6897 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171521001.545:423): user pid=6896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171521001.545:424): user pid=6896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171521001.548:425): user pid=6897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171521001.548:426): user pid=6897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171521001.573:427): user pid=6896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171521001.574:428): user pid=6896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171521301.868:429): user pid=6936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171521301.869:430): login pid=6936 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171521301.873:431): user pid=6936 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171521301.873:432): user pid=6936 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171521396.777:433): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171521396.777:433): arch=c000003e syscall=2 success=yes exit=11 a0=339b5c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171521396.777:434): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171521396.777:434): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171521396.777:434): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171521396.786:435): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171521396.786:435): arch=c000003e syscall=2 success=yes exit=8 a0=30817d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171521397.284:436): avc: denied { getattr } for pid=6964 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171521397.284:436): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff4660d510 a2=7fff4660d510 a3=6c6280 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171521397.284:436): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171521397.284:437): avc: denied { read } for pid=6964 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171521397.284:437): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171521397.285:438): avc: denied { search } for pid=6964 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171521397.285:438): avc: denied { write } for pid=6964 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171521397.285:438): avc: denied { add_name } for pid=6964 comm="pyzor" name="xMQkOt" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171521397.285:438): avc: denied { create } for pid=6964 comm="pyzor" name="xMQkOt" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171521397.285:438): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171521397.285:439): avc: denied { getattr } for pid=6964 comm="pyzor" name="xMQkOt" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171521397.285:439): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff4660ba00 a2=7fff4660ba00 a3=3 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171521397.285:439): path="/tmp/xMQkOt" >type=AVC msg=audit(1171521397.286:440): avc: denied { write } for pid=6964 comm="pyzor" name="xMQkOt" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171521397.286:440): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15864 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171521397.286:440): path="/tmp/xMQkOt" >type=AVC msg=audit(1171521397.286:441): avc: denied { remove_name } for pid=6964 comm="pyzor" name="xMQkOt" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171521397.286:441): avc: denied { unlink } for pid=6964 comm="pyzor" name="xMQkOt" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171521397.286:441): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171521397.290:442): avc: denied { read } for pid=6964 comm="pyzor" name="tmp9Bmjjb" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171521397.290:442): arch=c000003e syscall=0 success=yes exit=719 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171521397.290:442): path=2F746D702F746D7039426D6A6A62202864656C6574656429 >type=AVC msg=audit(1171521402.247:443): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171521402.247:443): arch=c000003e syscall=62 success=yes exit=0 a0=1b34 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171521402.258:444): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171521402.258:444): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171521402.258:444): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171521402.259:445): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171521402.259:445): arch=c000003e syscall=86 success=yes exit=0 a0=31b4270 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171521402.259:446): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171521402.259:446): arch=c000003e syscall=87 success=yes exit=0 a0=31b4270 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171521402.259:447): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171521402.259:447): arch=c000003e syscall=2 success=yes exit=8 a0=33a4cc0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171521601.195:448): user pid=6989 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171521601.196:449): login pid=6989 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171521601.198:450): user pid=6990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171521601.198:451): login pid=6990 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171521601.199:452): user pid=6989 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171521601.199:453): user pid=6989 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171521601.203:454): user pid=6990 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171521601.203:455): user pid=6990 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171521601.219:456): user pid=6989 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171521601.219:457): user pid=6989 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171521901.521:458): user pid=7028 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171521901.521:459): login pid=7028 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171521901.524:460): user pid=7028 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171521901.524:461): user pid=7028 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171522201.841:462): user pid=7061 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171522201.842:463): login pid=7061 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171522201.844:464): user pid=7062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171522201.844:465): login pid=7062 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171522201.845:466): user pid=7061 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171522201.846:467): user pid=7061 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171522201.852:468): user pid=7062 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171522201.853:469): user pid=7062 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171522201.861:470): user pid=7061 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171522201.861:471): user pid=7061 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171522501.176:472): user pid=7097 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171522501.177:473): login pid=7097 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171522501.179:474): user pid=7097 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171522501.180:475): user pid=7097 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171522756.796:476): avc: denied { search } for pid=7137 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171522756.796:476): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=7137 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171522761.781:477): avc: denied { append } for pid=7133 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171522761.781:477): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=7128 pid=7133 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171522801.496:478): user pid=7142 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171522801.496:479): login pid=7142 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171522801.498:480): user pid=7143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171522801.498:481): login pid=7143 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171522801.500:482): user pid=7142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171522801.500:483): user pid=7142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171522801.506:484): user pid=7143 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171522801.507:485): user pid=7143 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171522801.517:486): user pid=7142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171522801.517:487): user pid=7142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171522861.825:488): user pid=7160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171522861.825:489): login pid=7160 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171522861.829:490): user pid=7160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171522861.829:491): user pid=7160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171522862.708:492): user pid=7160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171522862.708:493): user pid=7160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171523101.715:494): user pid=7202 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171523101.715:495): login pid=7202 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171523101.718:496): user pid=7202 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171523101.718:497): user pid=7202 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171523401.036:498): user pid=7250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171523401.036:499): login pid=7250 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171523401.037:500): user pid=7251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171523401.038:501): login pid=7251 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171523401.039:502): user pid=7250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171523401.039:503): user pid=7250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171523401.046:504): user pid=7251 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171523401.046:505): user pid=7251 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171523401.058:506): user pid=7250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171523401.058:507): user pid=7250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171523591.076:508): user pid=6100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171523591.076:509): user pid=6100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171523701.081:510): user pid=7287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171523701.081:511): login pid=7287 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171523701.086:512): user pid=7287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171523701.086:513): user pid=7287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171524001.402:514): user pid=7322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171524001.402:515): login pid=7322 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171524001.404:516): user pid=7323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171524001.405:517): login pid=7323 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171524001.405:518): user pid=7322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171524001.405:519): user pid=7322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171524001.413:520): user pid=7323 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171524001.413:521): user pid=7323 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171524001.425:522): user pid=7322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171524001.425:523): user pid=7322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171524301.727:524): user pid=7360 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171524301.727:525): login pid=7360 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171524301.730:526): user pid=7360 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171524301.730:527): user pid=7360 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171524333.098:528): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171524333.098:528): arch=c000003e syscall=2 success=yes exit=11 a0=325d240 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171524333.098:529): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171524333.098:529): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171524333.098:529): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171524333.106:530): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171524333.106:530): arch=c000003e syscall=2 success=yes exit=8 a0=32db950 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171524333.753:531): avc: denied { getattr } for pid=7383 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171524333.753:531): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff0dec9dc0 a2=7fff0dec9dc0 a3=6c6280 items=0 ppid=3451 pid=7383 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171524333.753:531): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171524333.753:532): avc: denied { read } for pid=7383 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171524333.753:532): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=7383 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171524338.715:533): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171524338.715:533): arch=c000003e syscall=62 success=yes exit=0 a0=1cd7 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171524338.824:534): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171524338.824:534): arch=c000003e syscall=2 success=yes exit=8 a0=307d850 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171524338.921:535): avc: denied { write } for pid=7379 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171524338.921:535): avc: denied { add_name } for pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171524338.921:535): avc: denied { create } for pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171524338.921:535): arch=c000003e syscall=2 success=yes exit=6 a0=61cab0 a1=c1 a2=124 a3=61cab0 items=0 ppid=7374 pid=7379 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171524338.921:536): avc: denied { write } for pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171524338.921:536): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cab0 items=0 ppid=7374 pid=7379 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171524338.921:536): path="/home/dhighley/_TzB.yrA1FB.douglas" >type=AVC msg=audit(1171524338.921:537): avc: denied { getattr } for pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171524338.921:537): arch=c000003e syscall=4 success=yes exit=0 a0=61cab0 a1=7fff0eb782d0 a2=7fff0eb782d0 a3=61cab0 items=0 ppid=7374 pid=7379 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171524338.921:537): path="/home/dhighley/_TzB.yrA1FB.douglas" >type=AVC msg=audit(1171524338.921:538): avc: denied { link } for pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171524338.921:538): arch=c000003e syscall=86 success=yes exit=0 a0=61cab0 a1=61b510 a2=7fff0eb781f0 a3=61cab0 items=0 ppid=7374 pid=7379 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171524338.921:539): avc: denied { remove_name } for pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171524338.921:539): avc: denied { unlink } for pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171524338.921:539): arch=c000003e syscall=87 success=yes exit=0 a0=61cab0 a1=61b510 a2=7fff0eb781f0 a3=61cab0 items=0 ppid=7374 pid=7379 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171524404.464:540): avc: denied { search } for pid=7397 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171524404.464:540): avc: denied { write } for pid=7397 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171524404.464:540): avc: denied { add_name } for pid=7397 comm="pyzor" name="krvEqY" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171524404.464:540): avc: denied { create } for pid=7397 comm="pyzor" name="krvEqY" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171524404.464:540): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=7397 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171524404.465:541): avc: denied { getattr } for pid=7397 comm="pyzor" name="krvEqY" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171524404.465:541): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffa8a0a200 a2=7fffa8a0a200 a3=2 items=0 ppid=3451 pid=7397 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171524404.465:541): path="/tmp/krvEqY" >type=AVC msg=audit(1171524404.465:542): avc: denied { write } for pid=7397 comm="pyzor" name="krvEqY" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171524404.465:542): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cf9e4 items=0 ppid=3451 pid=7397 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171524404.465:542): path="/tmp/krvEqY" >type=AVC msg=audit(1171524404.465:543): avc: denied { remove_name } for pid=7397 comm="pyzor" name="krvEqY" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171524404.465:543): avc: denied { unlink } for pid=7397 comm="pyzor" name="krvEqY" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171524404.465:543): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=7397 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171524404.467:544): avc: denied { read } for pid=7397 comm="pyzor" name="tmpZfyJEw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171524404.467:544): arch=c000003e syscall=0 success=yes exit=499 a0=4 a1=2aaaaf34d000 a2=1000 a3=61 items=0 ppid=3451 pid=7397 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171524404.467:544): path=2F746D702F746D705A66794A4577202864656C6574656429 >type=USER_ACCT msg=audit(1171524601.046:545): user pid=7422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171524601.046:546): login pid=7422 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171524601.048:547): user pid=7423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171524601.049:548): login pid=7423 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171524601.053:549): user pid=7422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171524601.053:550): user pid=7422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171524601.056:551): user pid=7423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171524601.057:552): user pid=7423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171524601.083:553): user pid=7422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171524601.083:554): user pid=7422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171524604.064:555): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171524604.064:555): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171524604.064:555): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171524604.064:556): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171524604.064:556): arch=c000003e syscall=86 success=yes exit=0 a0=3083d10 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171524604.064:557): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171524604.064:557): arch=c000003e syscall=87 success=yes exit=0 a0=3083d10 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171524604.125:558): avc: denied { append } for pid=7417 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171524604.125:558): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7414 pid=7417 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171524901.374:559): user pid=7462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171524901.375:560): login pid=7462 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171524901.378:561): user pid=7462 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171524901.378:562): user pid=7462 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171525186.911:563): avc: denied { search } for pid=7508 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171525186.911:563): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=7508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171525201.698:564): user pid=7511 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171525201.698:565): login pid=7511 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171525201.700:566): user pid=7512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171525201.700:567): login pid=7512 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171525201.702:568): user pid=7511 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171525201.702:569): user pid=7511 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171525201.705:570): user pid=7512 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171525201.705:571): user pid=7512 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171525201.724:572): user pid=7511 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171525201.724:573): user pid=7511 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171525501.030:574): user pid=7547 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171525501.030:575): login pid=7547 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171525501.034:576): user pid=7547 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171525501.034:577): user pid=7547 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171525801.348:578): user pid=7583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171525801.349:579): login pid=7583 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171525801.350:580): user pid=7584 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171525801.351:581): login pid=7584 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171525801.351:582): user pid=7583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171525801.352:583): user pid=7583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171525801.358:584): user pid=7584 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171525801.359:585): user pid=7584 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171525801.372:586): user pid=7583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171525801.373:587): user pid=7583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171525981.681:588): user pid=7610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171525981.682:589): login pid=7610 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171525981.685:590): user pid=7610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171525981.685:591): user pid=7610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171525981.852:592): user pid=7610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171525981.852:593): user pid=7610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171526101.857:594): user pid=7630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171526101.857:595): login pid=7630 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171526101.861:596): user pid=7630 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171526101.861:597): user pid=7630 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171526401.190:598): user pid=7666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171526401.190:599): login pid=7666 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171526401.192:600): user pid=7667 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171526401.192:601): login pid=7667 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171526401.192:602): user pid=7666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171526401.193:603): user pid=7666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171526401.194:604): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171526401.195:605): login pid=7668 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171526401.203:606): user pid=7667 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171526401.203:607): user pid=7667 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171526401.208:608): user pid=7668 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171526401.208:609): user pid=7668 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171526401.217:610): user pid=7666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171526401.218:611): user pid=7666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171526461.523:612): user pid=7687 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171526461.523:613): login pid=7687 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171526461.526:614): user pid=7687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171526461.526:615): user pid=7687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171526462.419:616): user pid=7687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171526462.419:617): user pid=7687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171526701.429:618): user pid=7726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171526701.429:619): login pid=7726 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171526701.433:620): user pid=7726 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171526701.433:621): user pid=7726 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171527001.752:622): user pid=7765 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171527001.752:623): login pid=7765 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171527001.754:624): user pid=7766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171527001.754:625): login pid=7766 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171527001.756:626): user pid=7765 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171527001.756:627): user pid=7765 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171527001.761:628): user pid=7766 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171527001.762:629): user pid=7766 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171527001.783:630): user pid=7765 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171527001.783:631): user pid=7765 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171527301.077:632): user pid=7803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171527301.077:633): login pid=7803 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171527301.080:634): user pid=7803 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171527301.080:635): user pid=7803 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171527601.396:636): user pid=7838 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171527601.397:637): login pid=7838 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171527601.398:638): user pid=7837 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171527601.398:639): login pid=7837 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171527601.401:640): user pid=7837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171527601.401:641): user pid=7837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171527601.405:642): user pid=7838 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171527601.405:643): user pid=7838 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171527601.421:644): user pid=7837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171527601.421:645): user pid=7837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171527638.446:646): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171527638.446:646): arch=c000003e syscall=62 success=yes exit=0 a0=1eb6 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171527640.561:647): avc: denied { write } for pid=7858 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171527640.561:647): avc: denied { add_name } for pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171527640.561:647): avc: denied { create } for pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171527640.561:647): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=7853 pid=7858 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171527640.561:648): avc: denied { write } for pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171527640.561:648): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=7853 pid=7858 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171527640.561:648): path="/home/dhighley/_y6B.YfB1FB.douglas" >type=AVC msg=audit(1171527640.561:649): avc: denied { getattr } for pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171527640.561:649): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fffe6145950 a2=7fffe6145950 a3=61b650 items=0 ppid=7853 pid=7858 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171527640.561:649): path="/home/dhighley/_y6B.YfB1FB.douglas" >type=AVC msg=audit(1171527640.561:650): avc: denied { link } for pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171527640.561:650): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61d3f0 a2=7fffe6145870 a3=61b650 items=0 ppid=7853 pid=7858 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171527640.561:651): avc: denied { remove_name } for pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171527640.561:651): avc: denied { unlink } for pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171527640.561:651): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61d3f0 a2=7fffe6145870 a3=61b650 items=0 ppid=7853 pid=7858 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171527901.733:652): user pid=7885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171527901.733:653): login pid=7885 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171527901.737:654): user pid=7885 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171527901.737:655): user pid=7885 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171528080.463:656): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171528080.463:656): arch=c000003e syscall=2 success=yes exit=11 a0=32ab4c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171528080.463:657): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171528080.463:657): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171528080.463:657): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171528080.472:658): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171528080.472:658): arch=c000003e syscall=2 success=yes exit=8 a0=32252d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171528080.965:659): avc: denied { getattr } for pid=7921 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171528080.965:659): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff49e3ad30 a2=7fff49e3ad30 a3=6c6280 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171528080.965:659): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171528080.965:660): avc: denied { read } for pid=7921 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171528080.965:660): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171528080.966:661): avc: denied { search } for pid=7921 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171528080.966:661): avc: denied { write } for pid=7921 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171528080.966:661): avc: denied { add_name } for pid=7921 comm="pyzor" name="iB3EKN" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171528080.966:661): avc: denied { create } for pid=7921 comm="pyzor" name="iB3EKN" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171528080.966:661): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171528080.967:662): avc: denied { getattr } for pid=7921 comm="pyzor" name="iB3EKN" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171528080.967:662): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff49e39220 a2=7fff49e39220 a3=3 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171528080.967:662): path="/tmp/iB3EKN" >type=AVC msg=audit(1171528080.967:663): avc: denied { write } for pid=7921 comm="pyzor" name="iB3EKN" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171528080.967:663): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef158c4 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171528080.967:663): path="/tmp/iB3EKN" >type=AVC msg=audit(1171528080.967:664): avc: denied { remove_name } for pid=7921 comm="pyzor" name="iB3EKN" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171528080.967:664): avc: denied { unlink } for pid=7921 comm="pyzor" name="iB3EKN" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171528080.967:664): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171528080.971:665): avc: denied { read } for pid=7921 comm="pyzor" name="tmpFEFENe" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171528080.971:665): arch=c000003e syscall=0 success=yes exit=1123 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171528080.971:665): path=2F746D702F746D70464546454E65202864656C6574656429 >type=AVC msg=audit(1171528086.406:666): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171528086.406:666): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171528086.406:666): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171528086.407:667): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171528086.407:667): arch=c000003e syscall=86 success=yes exit=0 a0=32aafe0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171528086.407:668): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171528086.407:668): arch=c000003e syscall=87 success=yes exit=0 a0=32aafe0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171528086.408:669): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171528086.408:669): arch=c000003e syscall=2 success=yes exit=8 a0=234dcb0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171528151.689:670): avc: denied { append } for pid=7931 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171528151.689:670): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7928 pid=7931 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171528201.055:671): user pid=7942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171528201.056:672): login pid=7942 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171528201.058:673): user pid=7943 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171528201.058:674): login pid=7943 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171528201.062:675): user pid=7942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171528201.063:676): user pid=7942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171528201.065:677): user pid=7943 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171528201.066:678): user pid=7943 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171528201.081:679): user pid=7942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171528201.081:680): user pid=7942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171528501.403:681): user pid=7988 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171528501.403:682): login pid=7988 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171528501.407:683): user pid=7988 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171528501.407:684): user pid=7988 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171528510.881:685): avc: denied { search } for pid=8010 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171528510.881:685): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=8010 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171528515.957:686): avc: denied { write } for pid=8006 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171528515.957:686): avc: denied { add_name } for pid=8006 comm="procmail" name="_G9B.DtB1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171528515.957:686): arch=c000003e syscall=2 success=yes exit=6 a0=61c980 a1=c1 a2=124 a3=61c980 items=0 ppid=8001 pid=8006 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171528515.957:687): avc: denied { remove_name } for pid=8006 comm="procmail" name="_G9B.DtB1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171528515.957:687): arch=c000003e syscall=87 success=yes exit=0 a0=61c980 a1=61b530 a2=7fffd9457d60 a3=61c980 items=0 ppid=8001 pid=8006 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171528801.739:688): user pid=8036 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171528801.740:689): login pid=8036 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171528801.740:690): user pid=8037 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171528801.741:691): login pid=8037 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171528801.743:692): user pid=8036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171528801.743:693): user pid=8036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171528801.744:694): user pid=8037 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171528801.745:695): user pid=8037 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171528801.767:696): user pid=8036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171528801.768:697): user pid=8036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171529101.069:698): user pid=8075 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171529101.070:699): login pid=8075 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171529101.074:700): user pid=8075 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171529101.074:701): user pid=8075 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171529401.389:702): user pid=8112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171529401.389:703): login pid=8112 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171529401.391:704): user pid=8113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171529401.392:705): login pid=8113 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171529401.392:706): user pid=8112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171529401.392:707): user pid=8112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171529401.400:708): user pid=8113 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171529401.400:709): user pid=8113 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171529401.406:710): user pid=8112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171529401.406:711): user pid=8112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171529701.718:712): user pid=8147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171529701.719:713): login pid=8147 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171529701.721:714): user pid=8147 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171529701.722:715): user pid=8147 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171530001.037:716): user pid=8181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171530001.037:717): login pid=8181 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171530001.039:718): user pid=8182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171530001.039:719): login pid=8182 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171530001.044:720): user pid=8181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171530001.044:721): user pid=8181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171530001.050:722): user pid=8182 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171530001.050:723): user pid=8182 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171530001.072:724): user pid=8181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171530001.072:725): user pid=8181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171530028.047:726): avc: denied { create } for pid=8201 comm="procmail" name="_JAC.sEC1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171530028.047:726): arch=c000003e syscall=2 success=yes exit=6 a0=61c800 a1=c1 a2=124 a3=61c800 items=0 ppid=8196 pid=8201 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171530028.047:727): avc: denied { write } for pid=8201 comm="procmail" name="_JAC.sEC1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171530028.047:727): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c800 items=0 ppid=8196 pid=8201 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171530028.047:727): path="/home/dhighley/_JAC.sEC1FB.douglas" >type=AVC msg=audit(1171530028.048:728): avc: denied { getattr } for pid=8201 comm="procmail" name="_JAC.sEC1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171530028.048:728): arch=c000003e syscall=4 success=yes exit=0 a0=61c800 a1=7fff8a966360 a2=7fff8a966360 a3=61c800 items=0 ppid=8196 pid=8201 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171530028.048:728): path="/home/dhighley/_JAC.sEC1FB.douglas" >type=AVC msg=audit(1171530028.048:729): avc: denied { link } for pid=8201 comm="procmail" name="_JAC.sEC1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171530028.048:729): arch=c000003e syscall=86 success=yes exit=0 a0=61c800 a1=61b520 a2=7fff8a966280 a3=61c800 items=0 ppid=8196 pid=8201 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171530028.048:730): avc: denied { unlink } for pid=8201 comm="procmail" name="_JAC.sEC1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171530028.048:730): arch=c000003e syscall=87 success=yes exit=0 a0=61c800 a1=61b520 a2=7fff8a966280 a3=61c800 items=0 ppid=8196 pid=8201 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171530061.362:731): user pid=8209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171530061.363:732): login pid=8209 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171530061.367:733): user pid=8209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171530061.367:734): user pid=8209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171530062.275:735): user pid=8209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171530062.276:736): user pid=8209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171530301.281:737): user pid=8247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171530301.282:738): login pid=8247 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171530301.286:739): user pid=8247 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171530301.286:740): user pid=8247 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171530601.605:741): user pid=8292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171530601.606:742): login pid=8292 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171530601.608:743): user pid=8293 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171530601.608:744): login pid=8293 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171530601.611:745): user pid=8292 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171530601.612:746): user pid=8292 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171530601.613:747): user pid=8293 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171530601.614:748): user pid=8293 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171530601.631:749): user pid=8292 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171530601.631:750): user pid=8292 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171530650.127:751): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171530650.127:751): arch=c000003e syscall=2 success=yes exit=11 a0=3356c20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171530650.127:752): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171530650.127:752): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171530650.127:752): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171530650.135:753): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171530650.135:753): arch=c000003e syscall=2 success=yes exit=8 a0=33d32c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171530650.705:754): avc: denied { getattr } for pid=8316 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171530650.705:754): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff08c99b90 a2=7fff08c99b90 a3=6c6280 items=0 ppid=3451 pid=8316 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171530650.705:754): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171530650.705:755): avc: denied { read } for pid=8316 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171530650.705:755): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=8316 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171530655.667:756): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171530655.667:756): arch=c000003e syscall=62 success=yes exit=0 a0=207c a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171530655.772:757): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171530655.772:757): arch=c000003e syscall=2 success=yes exit=8 a0=3268a40 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171530901.933:758): user pid=8338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171530901.934:759): login pid=8338 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171530901.938:760): user pid=8338 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171530901.938:761): user pid=8338 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171531201.258:762): user pid=8374 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171531201.258:763): login pid=8374 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171531201.260:764): user pid=8375 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171531201.260:765): login pid=8375 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171531201.262:766): user pid=8374 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171531201.262:767): user pid=8374 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171531201.269:768): user pid=8375 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171531201.269:769): user pid=8375 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171531201.281:770): user pid=8374 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171531201.281:771): user pid=8374 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171531501.592:772): user pid=8410 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171531501.592:773): login pid=8410 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171531501.596:774): user pid=8410 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171531501.596:775): user pid=8410 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171531560.381:776): avc: denied { search } for pid=8433 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171531560.381:776): avc: denied { write } for pid=8433 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171531560.381:776): avc: denied { add_name } for pid=8433 comm="pyzor" name="lWfLpO" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171531560.381:776): avc: denied { create } for pid=8433 comm="pyzor" name="lWfLpO" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171531560.381:776): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=8433 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171531560.382:777): avc: denied { getattr } for pid=8433 comm="pyzor" name="lWfLpO" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171531560.382:777): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe89ab1a0 a2=7fffe89ab1a0 a3=2 items=0 ppid=3451 pid=8433 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171531560.382:777): path="/tmp/lWfLpO" >type=AVC msg=audit(1171531560.382:778): avc: denied { write } for pid=8433 comm="pyzor" name="lWfLpO" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171531560.382:778): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=8433 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171531560.382:778): path="/tmp/lWfLpO" >type=AVC msg=audit(1171531560.382:779): avc: denied { remove_name } for pid=8433 comm="pyzor" name="lWfLpO" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171531560.382:779): avc: denied { unlink } for pid=8433 comm="pyzor" name="lWfLpO" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171531560.382:779): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=8433 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171531560.384:780): avc: denied { read } for pid=8433 comm="pyzor" name="tmpu_orh0" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171531560.384:780): arch=c000003e syscall=0 success=yes exit=908 a0=4 a1=2aaaaf34d000 a2=1000 a3=8d items=0 ppid=3451 pid=8433 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171531560.384:780): path=2F746D702F746D70755F6F726830202864656C6574656429 >type=AVC msg=audit(1171531565.543:781): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171531565.543:781): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171531565.543:781): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171531565.544:782): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171531565.544:782): arch=c000003e syscall=86 success=yes exit=0 a0=31ed3c0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171531565.544:783): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171531565.544:783): arch=c000003e syscall=87 success=yes exit=0 a0=31ed3c0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171531801.911:784): user pid=8454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171531801.911:785): login pid=8454 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171531801.913:786): user pid=8455 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171531801.913:787): login pid=8455 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171531801.915:788): user pid=8454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171531801.915:789): user pid=8454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171531801.919:790): user pid=8455 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171531801.919:791): user pid=8455 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171531801.932:792): user pid=8454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171531801.932:793): user pid=8454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171531901.410:794): avc: denied { search } for pid=8483 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171531901.410:794): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=8483 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171531906.398:795): avc: denied { append } for pid=8479 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171531906.398:795): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=3 items=0 ppid=8476 pid=8479 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171532101.253:796): user pid=8501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171532101.253:797): login pid=8501 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171532101.257:798): user pid=8501 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171532101.257:799): user pid=8501 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171532401.582:800): user pid=8536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171532401.582:801): login pid=8536 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171532401.583:802): user pid=8537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171532401.583:803): login pid=8537 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171532401.586:804): user pid=8536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171532401.586:805): user pid=8536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171532401.588:806): user pid=8537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171532401.588:807): user pid=8537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171532401.602:808): user pid=8536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171532401.602:809): user pid=8536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171532701.921:810): user pid=8574 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171532701.921:811): login pid=8574 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171532701.924:812): user pid=8574 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171532701.924:813): user pid=8574 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171533001.251:814): user pid=8608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171533001.251:815): login pid=8608 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171533001.253:816): user pid=8609 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171533001.254:817): login pid=8609 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171533001.256:818): user pid=8608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171533001.256:819): user pid=8608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171533001.261:820): user pid=8609 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171533001.261:821): user pid=8609 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171533001.273:822): user pid=8608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171533001.274:823): user pid=8608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171533301.584:824): user pid=8644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171533301.585:825): login pid=8644 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171533301.589:826): user pid=8644 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171533301.589:827): user pid=8644 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171533354.491:828): avc: denied { write } for pid=8662 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171533354.491:828): avc: denied { add_name } for pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171533354.491:828): avc: denied { create } for pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171533354.491:828): arch=c000003e syscall=2 success=yes exit=6 a0=61cc60 a1=c1 a2=124 a3=61cc60 items=0 ppid=8657 pid=8662 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171533354.492:829): avc: denied { write } for pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171533354.492:829): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cc60 items=0 ppid=8657 pid=8662 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171533354.492:829): path="/home/dhighley/_WHC.q4C1FB.douglas" >type=AVC msg=audit(1171533354.492:830): avc: denied { getattr } for pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171533354.492:830): arch=c000003e syscall=4 success=yes exit=0 a0=61cc60 a1=7fff87119870 a2=7fff87119870 a3=61cc60 items=0 ppid=8657 pid=8662 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171533354.492:830): path="/home/dhighley/_WHC.q4C1FB.douglas" >type=AVC msg=audit(1171533354.492:831): avc: denied { link } for pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171533354.492:831): arch=c000003e syscall=86 success=yes exit=0 a0=61cc60 a1=61b510 a2=7fff87119790 a3=61cc60 items=0 ppid=8657 pid=8662 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171533354.492:832): avc: denied { remove_name } for pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171533354.492:832): avc: denied { unlink } for pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171533354.492:832): arch=c000003e syscall=87 success=yes exit=0 a0=61cc60 a1=61b510 a2=7fff87119790 a3=61cc60 items=0 ppid=8657 pid=8662 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171533601.910:833): user pid=8697 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171533601.910:834): login pid=8697 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171533601.912:835): user pid=8698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171533601.912:836): login pid=8698 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171533601.913:837): user pid=8697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171533601.913:838): user pid=8697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171533601.917:839): user pid=8698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171533601.917:840): user pid=8698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171533601.940:841): user pid=8697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171533601.941:842): user pid=8697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171533661.232:843): user pid=8712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171533661.232:844): login pid=8712 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171533661.236:845): user pid=8712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171533661.236:846): user pid=8712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171533662.144:847): user pid=8712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171533662.145:848): user pid=8712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171533901.151:849): user pid=8756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171533901.152:850): login pid=8756 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171533901.156:851): user pid=8756 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171533901.156:852): user pid=8756 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171534118.254:853): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171534118.254:853): arch=c000003e syscall=1 success=yes exit=63 a0=8 a1=3224bc0 a2=3f a3=3224bc0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171534118.254:853): path="/home/dhighley/.razor/razor-agent.log" >type=AVC msg=audit(1171534118.295:854): avc: denied { getattr } for pid=8796 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171534118.295:854): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff11fa8ea0 a2=7fff11fa8ea0 a3=6c6280 items=0 ppid=3451 pid=8796 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171534118.295:854): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171534118.295:855): avc: denied { read } for pid=8796 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171534118.295:855): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=8796 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171534123.258:856): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171534123.258:856): arch=c000003e syscall=62 success=yes exit=0 a0=225c a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171534123.271:857): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171534123.271:857): arch=c000003e syscall=2 success=yes exit=8 a0=3336cf0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171534201.475:858): user pid=8803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171534201.475:859): login pid=8803 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171534201.478:860): user pid=8804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171534201.478:861): login pid=8804 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171534201.478:862): user pid=8803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171534201.478:863): user pid=8803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171534201.486:864): user pid=8804 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171534201.487:865): user pid=8804 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171534201.498:866): user pid=8803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171534201.498:867): user pid=8803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171534390.133:868): user pid=7667 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171534390.134:869): user pid=7667 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171534425.680:870): avc: denied { search } for pid=8846 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171534425.680:870): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=8846 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171534425.681:871): avc: denied { search } for pid=8846 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171534425.681:871): avc: denied { write } for pid=8846 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171534425.681:871): avc: denied { add_name } for pid=8846 comm="pyzor" name="tiHy5R" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171534425.681:871): avc: denied { create } for pid=8846 comm="pyzor" name="tiHy5R" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171534425.681:871): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=8846 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171534425.682:872): avc: denied { getattr } for pid=8846 comm="pyzor" name="tiHy5R" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171534425.682:872): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffffca1c220 a2=7ffffca1c220 a3=2 items=0 ppid=3451 pid=8846 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171534425.682:872): path="/tmp/tiHy5R" >type=AVC msg=audit(1171534425.682:873): avc: denied { write } for pid=8846 comm="pyzor" name="tiHy5R" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171534425.682:873): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cff84 items=0 ppid=3451 pid=8846 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171534425.682:873): path="/tmp/tiHy5R" >type=AVC msg=audit(1171534425.682:874): avc: denied { remove_name } for pid=8846 comm="pyzor" name="tiHy5R" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171534425.682:874): avc: denied { unlink } for pid=8846 comm="pyzor" name="tiHy5R" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171534425.682:874): arch=c000003e syscall=87 success=yes exit=0 a0=6c6240 a1=6cc6c0 a2=37a8f2f4d8 a3=6c6240 items=0 ppid=3451 pid=8846 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171534427.153:875): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171534427.153:875): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171534427.153:875): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171534427.153:876): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171534427.153:876): arch=c000003e syscall=86 success=yes exit=0 a0=31a6250 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171534427.154:877): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171534427.154:877): arch=c000003e syscall=87 success=yes exit=0 a0=31a6250 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171534427.314:878): avc: denied { append } for pid=8842 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171534427.314:878): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=8837 pid=8842 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171534430.696:879): avc: denied { read } for pid=8855 comm="pyzor" name="tmpsjiHj6" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171534430.696:879): arch=c000003e syscall=0 success=yes exit=2246 a0=4 a1=2aaaaf34d000 a2=1000 a3=1c3 items=0 ppid=3451 pid=8855 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171534430.696:879): path=2F746D702F746D70736A69486A36202864656C6574656429 >type=USER_ACCT msg=audit(1171534501.139:880): user pid=8861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171534501.139:881): login pid=8861 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171534501.143:882): user pid=8861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171534501.143:883): user pid=8861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171534801.458:884): user pid=8900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171534801.458:885): login pid=8900 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171534801.460:886): user pid=8901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171534801.460:887): login pid=8901 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171534801.462:888): user pid=8900 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171534801.462:889): user pid=8900 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171534801.467:890): user pid=8901 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171534801.467:891): user pid=8901 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171534801.482:892): user pid=8900 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171534801.483:893): user pid=8900 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171535101.802:894): user pid=8938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171535101.802:895): login pid=8938 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171535101.805:896): user pid=8938 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171535101.805:897): user pid=8938 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171535401.121:898): user pid=8972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171535401.122:899): login pid=8972 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171535401.123:900): user pid=8971 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171535401.123:901): login pid=8971 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171535401.126:902): user pid=8971 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171535401.126:903): user pid=8971 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171535401.128:904): user pid=8972 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171535401.128:905): user pid=8972 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171535401.145:906): user pid=8971 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171535401.145:907): user pid=8971 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171535701.449:908): user pid=9009 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171535701.449:909): login pid=9009 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171535701.452:910): user pid=9009 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171535701.452:911): user pid=9009 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171536001.768:912): user pid=9043 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171536001.769:913): login pid=9043 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171536001.770:914): user pid=9044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171536001.770:915): login pid=9044 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171536001.771:916): user pid=9043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171536001.771:917): user pid=9043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171536001.781:918): user pid=9044 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171536001.781:919): user pid=9044 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171536001.786:920): user pid=9043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171536001.786:921): user pid=9043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171536301.101:922): user pid=9080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171536301.101:923): login pid=9080 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171536301.105:924): user pid=9080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171536301.105:925): user pid=9080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171536601.421:926): user pid=9113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171536601.421:927): login pid=9113 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171536601.423:928): user pid=9114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171536601.423:929): login pid=9114 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171536601.425:930): user pid=9113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171536601.425:931): user pid=9113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171536601.434:932): user pid=9114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171536601.434:933): user pid=9114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171536601.441:934): user pid=9113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171536601.441:935): user pid=9113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171536776.856:936): avc: denied { write } for pid=9144 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171536776.856:936): avc: denied { add_name } for pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171536776.856:936): avc: denied { create } for pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171536776.856:936): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=9139 pid=9144 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171536776.857:937): avc: denied { write } for pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171536776.857:937): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=9139 pid=9144 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171536776.857:937): path="/home/dhighley/_4OC.IuD1FB.douglas" >type=AVC msg=audit(1171536776.857:938): avc: denied { getattr } for pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171536776.857:938): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7fff4ff42920 a2=7fff4ff42920 a3=61a500 items=0 ppid=9139 pid=9144 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171536776.857:938): path="/home/dhighley/_4OC.IuD1FB.douglas" >type=AVC msg=audit(1171536776.857:939): avc: denied { link } for pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171536776.857:939): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff4ff42840 a3=61a500 items=0 ppid=9139 pid=9144 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171536776.857:940): avc: denied { remove_name } for pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171536776.857:940): avc: denied { unlink } for pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171536776.857:940): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff4ff42840 a3=61a500 items=0 ppid=9139 pid=9144 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171536901.749:941): user pid=9159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171536901.749:942): login pid=9159 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171536901.753:943): user pid=9159 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171536901.753:944): user pid=9159 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171537201.075:945): user pid=9195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171537201.075:946): login pid=9195 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171537201.077:947): user pid=9197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171537201.077:948): login pid=9197 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171537201.079:949): user pid=9195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171537201.079:950): user pid=9195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171537201.079:951): user pid=9196 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171537201.079:952): login pid=9196 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171537201.086:953): user pid=9197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171537201.086:954): user pid=9197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171537201.088:955): user pid=9196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171537201.088:956): user pid=9196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171537201.104:957): user pid=9195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171537201.105:958): user pid=9195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171537261.405:959): user pid=9216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171537261.405:960): login pid=9216 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171537261.408:961): user pid=9216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171537261.408:962): user pid=9216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171537262.310:963): user pid=9216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171537262.311:964): user pid=9216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171537501.317:965): user pid=9255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171537501.317:966): login pid=9255 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171537501.320:967): user pid=9255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171537501.320:968): user pid=9255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171537746.732:969): avc: denied { ioctl } for pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171537746.732:969): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171537746.732:969): path="/home/dhighley/.razor/server.c123.cloudmark.com.conf" >type=AVC msg=audit(1171537747.269:970): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171537747.269:970): arch=c000003e syscall=1 success=yes exit=63 a0=8 a1=322d2c0 a2=3f a3=322d2c0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171537747.269:970): path="/home/dhighley/.razor/razor-agent.log" >type=AVC msg=audit(1171537747.310:971): avc: denied { getattr } for pid=9293 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171537747.310:971): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffc88c77c0 a2=7fffc88c77c0 a3=6c6280 items=0 ppid=3451 pid=9293 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171537747.310:971): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171537747.310:972): avc: denied { read } for pid=9293 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171537747.310:972): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=9293 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171537752.272:973): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171537752.272:973): arch=c000003e syscall=62 success=yes exit=0 a0=244d a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171537752.285:974): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171537752.285:974): arch=c000003e syscall=2 success=yes exit=8 a0=333d2b0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171537801.640:975): user pid=9298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171537801.640:976): login pid=9298 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171537801.643:977): user pid=9299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171537801.643:978): login pid=9299 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171537801.646:979): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171537801.646:980): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171537801.649:981): user pid=9299 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171537801.649:982): user pid=9299 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171537801.664:983): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171537801.664:984): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171538101.979:985): user pid=9335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171538101.979:986): login pid=9335 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171538101.983:987): user pid=9335 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171538101.983:988): user pid=9335 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171538365.916:989): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171538365.916:989): arch=c000003e syscall=2 success=yes exit=11 a0=308a900 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171538370.355:990): avc: denied { search } for pid=9382 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171538370.355:990): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=9382 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171538370.356:991): avc: denied { search } for pid=9382 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171538370.356:991): avc: denied { write } for pid=9382 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171538370.356:991): avc: denied { add_name } for pid=9382 comm="pyzor" name="-RHa0l" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171538370.356:991): avc: denied { create } for pid=9382 comm="pyzor" name="-RHa0l" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171538370.356:991): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=9382 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171538370.356:992): avc: denied { getattr } for pid=9382 comm="pyzor" name="-RHa0l" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171538370.356:992): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffa14b08a0 a2=7fffa14b08a0 a3=3 items=0 ppid=3451 pid=9382 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171538370.356:992): path="/tmp/-RHa0l" >type=AVC msg=audit(1171538370.356:993): avc: denied { write } for pid=9382 comm="pyzor" name="-RHa0l" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171538370.356:993): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef158c4 items=0 ppid=3451 pid=9382 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171538370.356:993): path="/tmp/-RHa0l" >type=AVC msg=audit(1171538370.356:994): avc: denied { remove_name } for pid=9382 comm="pyzor" name="-RHa0l" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171538370.356:994): avc: denied { unlink } for pid=9382 comm="pyzor" name="-RHa0l" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171538370.356:994): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=9382 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171538370.357:995): avc: denied { read } for pid=9382 comm="pyzor" name="tmpJU4AIn" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171538370.357:995): arch=c000003e syscall=0 success=yes exit=238 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=9382 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171538370.357:995): path=2F746D702F746D704A553441496E202864656C6574656429 >type=AVC msg=audit(1171538375.325:996): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171538375.325:996): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171538375.325:996): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171538375.325:997): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171538375.325:997): arch=c000003e syscall=86 success=yes exit=0 a0=3312be0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171538375.325:998): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171538375.325:998): arch=c000003e syscall=87 success=yes exit=0 a0=3312be0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171538375.340:999): avc: denied { append } for pid=9378 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171538375.340:999): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=9373 pid=9378 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171538401.304:1000): user pid=9385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171538401.305:1001): login pid=9385 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171538401.306:1002): user pid=9386 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171538401.307:1003): login pid=9386 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171538401.309:1004): user pid=9385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171538401.309:1005): user pid=9385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171538401.312:1006): user pid=9386 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171538401.312:1007): user pid=9386 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171538401.330:1008): user pid=9385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171538401.331:1009): user pid=9385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171538701.645:1010): user pid=9421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171538701.646:1011): login pid=9421 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171538701.649:1012): user pid=9421 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171538701.649:1013): user pid=9421 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171538722.333:1014): avc: denied { write } for pid=9441 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171538722.333:1014): avc: denied { add_name } for pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171538722.333:1014): avc: denied { create } for pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171538722.333:1014): arch=c000003e syscall=2 success=yes exit=6 a0=61cc00 a1=c1 a2=124 a3=61cc00 items=0 ppid=9436 pid=9441 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171538722.334:1015): avc: denied { write } for pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171538722.334:1015): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cc00 items=0 ppid=9436 pid=9441 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171538722.334:1015): path="/home/dhighley/_hTC.iME1FB.douglas" >type=AVC msg=audit(1171538722.334:1016): avc: denied { getattr } for pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171538722.334:1016): arch=c000003e syscall=4 success=yes exit=0 a0=61cc00 a1=7fff1e036a30 a2=7fff1e036a30 a3=61cc00 items=0 ppid=9436 pid=9441 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171538722.334:1016): path="/home/dhighley/_hTC.iME1FB.douglas" >type=AVC msg=audit(1171538722.334:1017): avc: denied { link } for pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171538722.334:1017): arch=c000003e syscall=86 success=yes exit=0 a0=61cc00 a1=61b520 a2=7fff1e036950 a3=61cc00 items=0 ppid=9436 pid=9441 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171538722.334:1018): avc: denied { remove_name } for pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171538722.334:1018): avc: denied { unlink } for pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171538722.334:1018): arch=c000003e syscall=87 success=yes exit=0 a0=61cc00 a1=61b520 a2=7fff1e036950 a3=61cc00 items=0 ppid=9436 pid=9441 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171539001.967:1019): user pid=9475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171539001.967:1020): login pid=9475 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171539001.969:1021): user pid=9476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171539001.969:1022): login pid=9476 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171539001.970:1023): user pid=9475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171539001.971:1024): user pid=9475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171539001.976:1025): user pid=9476 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171539001.976:1026): user pid=9476 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171539001.989:1027): user pid=9475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171539001.990:1028): user pid=9475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171539301.315:1029): user pid=9514 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171539301.316:1030): login pid=9514 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171539301.320:1031): user pid=9514 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171539301.320:1032): user pid=9514 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171539601.647:1033): user pid=9562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171539601.648:1034): login pid=9562 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171539601.650:1035): user pid=9563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171539601.650:1036): login pid=9563 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171539601.652:1037): user pid=9562 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171539601.652:1038): user pid=9562 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171539601.657:1039): user pid=9563 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171539601.657:1040): user pid=9563 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171539601.671:1041): user pid=9562 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171539601.671:1042): user pid=9562 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171539707.071:1043): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171539707.071:1043): arch=c000003e syscall=62 success=yes exit=0 a0=257b a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171539901.982:1044): user pid=9613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171539901.983:1045): login pid=9613 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171539901.986:1046): user pid=9613 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171539901.986:1047): user pid=9613 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171540190.998:1048): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171540190.998:1048): arch=c000003e syscall=2 success=yes exit=11 a0=340ec00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171540190.998:1049): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171540190.998:1049): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171540190.998:1049): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171540191.007:1050): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171540191.007:1050): arch=c000003e syscall=2 success=yes exit=8 a0=30da240 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171540191.791:1051): avc: denied { getattr } for pid=9656 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171540191.791:1051): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffac0b6fb0 a2=7fffac0b6fb0 a3=6c6280 items=0 ppid=3451 pid=9656 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171540191.791:1051): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171540191.791:1052): avc: denied { read } for pid=9656 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171540191.791:1052): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=9656 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171540198.153:1053): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171540198.153:1053): arch=c000003e syscall=2 success=yes exit=8 a0=3405830 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171540201.308:1054): user pid=9658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171540201.309:1055): login pid=9658 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171540201.311:1056): user pid=9659 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171540201.311:1057): login pid=9659 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171540201.313:1058): user pid=9658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171540201.313:1059): user pid=9658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171540201.326:1060): user pid=9659 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171540201.326:1061): user pid=9659 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171540201.332:1062): user pid=9658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171540201.332:1063): user pid=9658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171540501.654:1064): user pid=9696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171540501.654:1065): login pid=9696 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171540501.657:1066): user pid=9696 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171540501.657:1067): user pid=9696 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171540801.973:1068): user pid=9730 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171540801.973:1069): login pid=9730 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171540801.976:1070): user pid=9731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171540801.976:1071): login pid=9731 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171540801.979:1072): user pid=9730 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171540801.979:1073): user pid=9730 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171540801.981:1074): user pid=9731 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171540801.981:1075): user pid=9731 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171540801.997:1076): user pid=9730 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171540801.997:1077): user pid=9730 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171540861.303:1078): user pid=9746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171540861.304:1079): login pid=9746 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171540861.308:1080): user pid=9746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171540861.308:1081): user pid=9746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171540862.215:1082): user pid=9746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171540862.216:1083): user pid=9746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171540921.219:1084): user pid=9771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171540921.219:1085): login pid=9771 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171540921.223:1086): user pid=9771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171540921.223:1087): user pid=9771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171540998.446:1088): avc: denied { search } for pid=9802 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171540998.446:1088): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=9802 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171540998.447:1089): avc: denied { search } for pid=9802 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171540998.447:1089): avc: denied { write } for pid=9802 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171540998.447:1089): avc: denied { add_name } for pid=9802 comm="pyzor" name="KCVhjA" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171540998.447:1089): avc: denied { create } for pid=9802 comm="pyzor" name="KCVhjA" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171540998.447:1089): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=9802 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171540998.448:1090): avc: denied { getattr } for pid=9802 comm="pyzor" name="KCVhjA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171540998.448:1090): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcdb15f00 a2=7fffcdb15f00 a3=3 items=0 ppid=3451 pid=9802 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171540998.448:1090): path="/tmp/KCVhjA" >type=AVC msg=audit(1171540998.448:1091): avc: denied { write } for pid=9802 comm="pyzor" name="KCVhjA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171540998.448:1091): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15894 items=0 ppid=3451 pid=9802 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171540998.448:1091): path="/tmp/KCVhjA" >type=AVC msg=audit(1171540998.448:1092): avc: denied { remove_name } for pid=9802 comm="pyzor" name="KCVhjA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171540998.448:1092): avc: denied { unlink } for pid=9802 comm="pyzor" name="KCVhjA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171540998.448:1092): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=9802 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171540998.449:1093): avc: denied { read } for pid=9802 comm="pyzor" name="tmp0JO00S" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171540998.449:1093): arch=c000003e syscall=0 success=yes exit=674 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=9802 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171540998.449:1093): path=2F746D702F746D70304A4F303053202864656C6574656429 >type=AVC msg=audit(1171541003.420:1094): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171541003.420:1094): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171541003.420:1094): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171541003.420:1095): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171541003.420:1095): arch=c000003e syscall=86 success=yes exit=0 a0=30da420 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171541003.420:1096): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171541003.420:1096): arch=c000003e syscall=87 success=yes exit=0 a0=30da420 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171541003.441:1097): avc: denied { append } for pid=9798 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171541003.441:1097): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=9793 pid=9798 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171541101.226:1098): user pid=9811 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171541101.226:1099): login pid=9811 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171541101.231:1100): user pid=9811 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171541101.231:1101): user pid=9811 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171541401.551:1102): user pid=9851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171541401.551:1103): login pid=9851 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171541401.551:1104): user pid=9850 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171541401.551:1105): login pid=9850 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171541401.557:1106): user pid=9851 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171541401.557:1107): user pid=9851 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171541401.562:1108): user pid=9850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171541401.562:1109): user pid=9850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171541401.582:1110): user pid=9850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171541401.582:1111): user pid=9850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171541701.885:1112): user pid=9898 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171541701.885:1113): login pid=9898 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171541701.888:1114): user pid=9898 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171541701.888:1115): user pid=9898 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171542001.215:1116): user pid=9932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171542001.216:1117): login pid=9932 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171542001.217:1118): user pid=9933 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171542001.217:1119): login pid=9933 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171542001.219:1120): user pid=9932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171542001.219:1121): user pid=9932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171542001.228:1122): user pid=9933 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171542001.228:1123): user pid=9933 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171542001.235:1124): user pid=9932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171542001.236:1125): user pid=9932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171542274.020:1126): avc: denied { write } for pid=9971 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171542274.020:1126): avc: denied { add_name } for pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171542274.020:1126): avc: denied { create } for pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171542274.020:1126): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=9966 pid=9971 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171542274.021:1127): avc: denied { write } for pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171542274.021:1127): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b670 items=0 ppid=9966 pid=9971 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171542274.021:1127): path="/home/dhighley/_zbC.CEF1FB.douglas" >type=AVC msg=audit(1171542274.021:1128): avc: denied { getattr } for pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171542274.021:1128): arch=c000003e syscall=4 success=yes exit=0 a0=61b670 a1=7fff8206ecd0 a2=7fff8206ecd0 a3=61b670 items=0 ppid=9966 pid=9971 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171542274.021:1128): path="/home/dhighley/_zbC.CEF1FB.douglas" >type=AVC msg=audit(1171542274.021:1129): avc: denied { link } for pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171542274.021:1129): arch=c000003e syscall=86 success=yes exit=0 a0=61b670 a1=61d010 a2=7fff8206ebf0 a3=61b670 items=0 ppid=9966 pid=9971 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171542274.021:1130): avc: denied { remove_name } for pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171542274.021:1130): avc: denied { unlink } for pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171542274.021:1130): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61d010 a2=7fff8206ebf0 a3=61b670 items=0 ppid=9966 pid=9971 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171542301.553:1131): user pid=9980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171542301.554:1132): login pid=9980 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171542301.558:1133): user pid=9980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171542301.558:1134): user pid=9980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171542601.872:1135): user pid=10015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171542601.873:1136): login pid=10015 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171542601.875:1137): user pid=10016 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171542601.875:1138): login pid=10016 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171542601.877:1139): user pid=10015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171542601.877:1140): user pid=10015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171542601.882:1141): user pid=10016 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171542601.882:1142): user pid=10016 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171542601.893:1143): user pid=10015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171542601.893:1144): user pid=10015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171542901.201:1145): user pid=10053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171542901.201:1146): login pid=10053 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171542901.205:1147): user pid=10053 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171542901.205:1148): user pid=10053 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171543169.833:1149): avc: denied { getattr } for pid=10095 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171543169.833:1149): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff80950850 a2=7fff80950850 a3=6c6280 items=0 ppid=3451 pid=10095 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171543169.833:1149): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171543169.833:1150): avc: denied { read } for pid=10095 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171543169.833:1150): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=10095 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171543174.798:1151): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171543174.798:1151): arch=c000003e syscall=62 success=yes exit=0 a0=276f a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171543174.806:1152): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171543174.806:1152): arch=c000003e syscall=2 success=yes exit=8 a0=33e2170 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171543201.524:1153): user pid=10098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171543201.524:1154): login pid=10098 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171543201.526:1155): user pid=10099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171543201.526:1156): login pid=10099 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171543201.528:1157): user pid=10098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171543201.528:1158): user pid=10098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171543201.531:1159): user pid=10099 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171543201.532:1160): user pid=10099 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171543201.559:1161): user pid=10098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171543201.559:1162): user pid=10098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171543501.858:1163): user pid=10140 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171543501.859:1164): login pid=10140 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171543501.861:1165): user pid=10140 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171543501.862:1166): user pid=10140 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171543801.179:1167): user pid=10175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171543801.179:1168): login pid=10175 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171543801.181:1169): user pid=10176 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171543801.181:1170): login pid=10176 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171543801.183:1171): user pid=10175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171543801.183:1172): user pid=10175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171543801.186:1173): user pid=10176 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171543801.186:1174): user pid=10176 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171543801.210:1175): user pid=10175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171543801.210:1176): user pid=10175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171544101.512:1177): user pid=10211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171544101.512:1178): login pid=10211 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171544101.515:1179): user pid=10211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171544101.515:1180): user pid=10211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171544280.622:1181): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171544280.622:1181): arch=c000003e syscall=2 success=yes exit=11 a0=32e6ad0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171544280.622:1182): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171544280.622:1182): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171544280.622:1182): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171544280.628:1183): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171544280.628:1183): arch=c000003e syscall=2 success=yes exit=8 a0=33d4240 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171544281.604:1184): avc: denied { search } for pid=10245 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171544281.604:1184): avc: denied { write } for pid=10245 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171544281.604:1184): avc: denied { add_name } for pid=10245 comm="pyzor" name="TiJvRI" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171544281.604:1184): avc: denied { create } for pid=10245 comm="pyzor" name="TiJvRI" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171544281.604:1184): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=10245 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171544281.604:1185): avc: denied { getattr } for pid=10245 comm="pyzor" name="TiJvRI" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171544281.604:1185): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb3176970 a2=7fffb3176970 a3=2 items=0 ppid=3451 pid=10245 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171544281.604:1185): path="/tmp/TiJvRI" >type=AVC msg=audit(1171544281.604:1186): avc: denied { write } for pid=10245 comm="pyzor" name="TiJvRI" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171544281.604:1186): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cf9e4 items=0 ppid=3451 pid=10245 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171544281.604:1186): path="/tmp/TiJvRI" >type=AVC msg=audit(1171544281.604:1187): avc: denied { remove_name } for pid=10245 comm="pyzor" name="TiJvRI" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171544281.604:1187): avc: denied { unlink } for pid=10245 comm="pyzor" name="TiJvRI" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171544281.604:1187): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=10245 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171544281.606:1188): avc: denied { read } for pid=10245 comm="pyzor" name="tmpxSL7e-" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171544281.606:1188): arch=c000003e syscall=0 success=yes exit=681 a0=4 a1=2aaaaf34d000 a2=1000 a3=9c items=0 ppid=3451 pid=10245 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171544281.606:1188): path=2F746D702F746D7078534C37652D202864656C6574656429 >type=AVC msg=audit(1171544286.797:1189): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171544286.797:1189): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171544286.797:1189): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171544286.797:1190): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171544286.797:1190): arch=c000003e syscall=86 success=yes exit=0 a0=32a6280 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171544286.797:1191): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171544286.797:1191): arch=c000003e syscall=87 success=yes exit=0 a0=32a6280 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171544286.840:1192): avc: denied { append } for pid=10241 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171544286.840:1192): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=2 items=0 ppid=10236 pid=10241 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171544401.846:1193): user pid=30587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171544401.846:1194): login pid=30587 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171544401.849:1195): user pid=30588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171544401.849:1196): login pid=30588 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171544401.851:1197): user pid=30587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171544401.851:1198): user pid=30587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171544401.860:1199): user pid=30588 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171544401.860:1200): user pid=30588 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171544401.913:1201): user pid=30587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171544401.913:1202): user pid=30587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171544408.049:1203): user pid=9771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171544408.049:1204): user pid=9771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171544461.054:1205): user pid=30666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171544461.054:1206): login pid=30666 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171544461.057:1207): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171544461.057:1208): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171544461.964:1209): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171544461.965:1210): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171544701.971:1211): user pid=30706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171544701.972:1212): login pid=30706 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171544701.974:1213): user pid=30706 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171544701.974:1214): user pid=30706 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171545001.298:1215): user pid=30747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171545001.298:1216): login pid=30747 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171545001.299:1217): user pid=30746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171545001.299:1218): login pid=30746 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171545001.302:1219): user pid=30747 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171545001.302:1220): user pid=30747 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171545001.307:1221): user pid=30746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171545001.307:1222): user pid=30746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171545001.327:1223): user pid=30746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171545001.327:1224): user pid=30746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171545190.118:1225): user pid=9196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171545190.119:1226): user pid=9196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171545301.124:1227): user pid=30784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171545301.124:1228): login pid=30784 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171545301.127:1229): user pid=30784 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171545301.127:1230): user pid=30784 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171545601.456:1231): user pid=30819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171545601.456:1232): login pid=30819 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171545601.458:1233): user pid=30820 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171545601.458:1234): login pid=30820 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171545601.460:1235): user pid=30819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171545601.460:1236): user pid=30819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171545601.463:1237): user pid=30820 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171545601.463:1238): user pid=30820 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171545601.479:1239): user pid=30819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171545601.480:1240): user pid=30819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171545901.789:1241): user pid=30859 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171545901.789:1242): login pid=30859 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171545901.793:1243): user pid=30859 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171545901.793:1244): user pid=30859 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171545911.644:1245): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171545911.644:1245): arch=c000003e syscall=2 success=yes exit=11 a0=32f41a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171545911.644:1246): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171545911.644:1246): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171545911.644:1246): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171545911.650:1247): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171545911.650:1247): arch=c000003e syscall=2 success=yes exit=8 a0=3286700 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171545916.462:1248): avc: denied { search } for pid=30881 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171545916.462:1248): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171545916.462:1249): avc: denied { getattr } for pid=30881 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171545916.462:1249): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffd855d460 a2=7fffd855d460 a3=6c6280 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171545916.462:1249): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171545916.462:1250): avc: denied { read } for pid=30881 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171545916.462:1250): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171545916.463:1251): avc: denied { search } for pid=30881 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171545916.463:1251): avc: denied { write } for pid=30881 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171545916.463:1251): avc: denied { add_name } for pid=30881 comm="pyzor" name="4tKMz7" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171545916.463:1251): avc: denied { create } for pid=30881 comm="pyzor" name="4tKMz7" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171545916.463:1251): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171545916.464:1252): avc: denied { getattr } for pid=30881 comm="pyzor" name="4tKMz7" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171545916.464:1252): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd855b950 a2=7fffd855b950 a3=3 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171545916.464:1252): path="/tmp/4tKMz7" >type=AVC msg=audit(1171545916.464:1253): avc: denied { write } for pid=30881 comm="pyzor" name="4tKMz7" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171545916.464:1253): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef158f4 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171545916.464:1253): path="/tmp/4tKMz7" >type=AVC msg=audit(1171545916.465:1254): avc: denied { remove_name } for pid=30881 comm="pyzor" name="4tKMz7" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171545916.465:1254): avc: denied { unlink } for pid=30881 comm="pyzor" name="4tKMz7" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171545916.465:1254): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171545916.480:1255): avc: denied { read } for pid=30881 comm="pyzor" name="tmpvP0wIs" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171545916.480:1255): arch=c000003e syscall=0 success=yes exit=816 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171545916.480:1255): path=2F746D702F746D70765030774973202864656C6574656429 >type=AVC msg=audit(1171545921.425:1256): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171545921.425:1256): arch=c000003e syscall=62 success=yes exit=0 a0=78a1 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171545923.439:1257): avc: denied { ioctl } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171545923.439:1257): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171545923.439:1257): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171545923.440:1258): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171545923.440:1258): arch=c000003e syscall=86 success=yes exit=0 a0=3375bd0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171545923.440:1259): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171545923.440:1259): arch=c000003e syscall=87 success=yes exit=0 a0=3375bd0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171545923.441:1260): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171545923.441:1260): arch=c000003e syscall=2 success=yes exit=8 a0=333d7e0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171545923.485:1261): avc: denied { write } for pid=30877 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171545923.485:1261): avc: denied { add_name } for pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171545923.485:1261): avc: denied { create } for pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171545923.485:1261): arch=c000003e syscall=2 success=yes exit=6 a0=61c970 a1=c1 a2=124 a3=61c970 items=0 ppid=30872 pid=30877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171545923.485:1262): avc: denied { write } for pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171545923.485:1262): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c970 items=0 ppid=30872 pid=30877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171545923.485:1262): path="/home/dhighley/_diH.D9F1FB.douglas" >type=AVC msg=audit(1171545923.486:1263): avc: denied { getattr } for pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171545923.486:1263): arch=c000003e syscall=4 success=yes exit=0 a0=61c970 a1=7fffc4157b50 a2=7fffc4157b50 a3=61c970 items=0 ppid=30872 pid=30877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171545923.486:1263): path="/home/dhighley/_diH.D9F1FB.douglas" >type=AVC msg=audit(1171545923.486:1264): avc: denied { link } for pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171545923.486:1264): arch=c000003e syscall=86 success=yes exit=0 a0=61c970 a1=61b520 a2=7fffc4157a70 a3=61c970 items=0 ppid=30872 pid=30877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171545923.486:1265): avc: denied { remove_name } for pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171545923.486:1265): avc: denied { unlink } for pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171545923.486:1265): arch=c000003e syscall=87 success=yes exit=0 a0=61c970 a1=61b520 a2=7fffc4157a70 a3=61c970 items=0 ppid=30872 pid=30877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171545923.486:1266): avc: denied { append } for pid=30877 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171545923.486:1266): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=30872 pid=30877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171546201.118:1267): user pid=30905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171546201.118:1268): login pid=30905 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171546201.120:1269): user pid=30906 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171546201.120:1270): login pid=30906 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171546201.122:1271): user pid=30905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171546201.122:1272): user pid=30905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171546201.125:1273): user pid=30906 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171546201.125:1274): user pid=30906 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171546201.141:1275): user pid=30905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171546201.141:1276): user pid=30905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171546501.457:1277): user pid=30945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171546501.457:1278): login pid=30945 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171546501.461:1279): user pid=30945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171546501.461:1280): user pid=30945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171546801.781:1281): user pid=30978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171546801.781:1282): login pid=30978 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171546801.782:1283): user pid=30979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171546801.783:1284): login pid=30979 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171546801.787:1285): user pid=30978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171546801.788:1286): user pid=30978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171546801.792:1287): user pid=30979 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171546801.792:1288): user pid=30979 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171546801.806:1289): user pid=30978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171546801.807:1290): user pid=30978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171547101.123:1291): user pid=31013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171547101.123:1292): login pid=31013 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171547101.126:1293): user pid=31013 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171547101.126:1294): user pid=31013 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171547401.453:1295): user pid=31051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171547401.453:1296): login pid=31051 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171547401.455:1297): user pid=31052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171547401.455:1298): login pid=31052 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171547401.457:1299): user pid=31051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171547401.457:1300): user pid=31051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171547401.460:1301): user pid=31052 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171547401.460:1302): user pid=31052 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171547401.473:1303): user pid=31051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171547401.473:1304): user pid=31051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171547461.579:1305): avc: denied { search } for pid=31077 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171547461.579:1305): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31077 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171547466.649:1306): avc: denied { write } for pid=31073 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171547466.649:1306): avc: denied { add_name } for pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171547466.649:1306): avc: denied { create } for pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171547466.649:1306): arch=c000003e syscall=2 success=yes exit=6 a0=61ca20 a1=c1 a2=124 a3=61ca20 items=0 ppid=31068 pid=31073 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171547466.650:1307): avc: denied { write } for pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171547466.650:1307): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61ca20 items=0 ppid=31068 pid=31073 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171547466.650:1307): path="/home/dhighley/_hlH.KVG1FB.douglas" >type=AVC msg=audit(1171547466.650:1308): avc: denied { getattr } for pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171547466.650:1308): arch=c000003e syscall=4 success=yes exit=0 a0=61ca20 a1=7fff09d05700 a2=7fff09d05700 a3=61ca20 items=0 ppid=31068 pid=31073 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171547466.650:1308): path="/home/dhighley/_hlH.KVG1FB.douglas" >type=AVC msg=audit(1171547466.650:1309): avc: denied { link } for pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171547466.650:1309): arch=c000003e syscall=86 success=yes exit=0 a0=61ca20 a1=61b510 a2=7fff09d05620 a3=61ca20 items=0 ppid=31068 pid=31073 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171547466.650:1310): avc: denied { remove_name } for pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171547466.650:1310): avc: denied { unlink } for pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171547466.650:1310): arch=c000003e syscall=87 success=yes exit=0 a0=61ca20 a1=61b510 a2=7fff09d05620 a3=61ca20 items=0 ppid=31068 pid=31073 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171547701.785:1311): user pid=31099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171547701.785:1312): login pid=31099 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171547701.787:1313): user pid=31099 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171547701.787:1314): user pid=31099 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171547995.118:1315): avc: denied { getattr } for pid=31147 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171547995.118:1315): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff0915a050 a2=7fff0915a050 a3=6c6280 items=0 ppid=3451 pid=31147 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171547995.118:1315): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171547995.118:1316): avc: denied { read } for pid=31147 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171547995.118:1316): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31147 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=USER_ACCT msg=audit(1171548001.119:1317): user pid=31148 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171548001.119:1318): login pid=31148 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171548001.121:1319): user pid=31149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171548001.121:1320): login pid=31149 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171548001.123:1321): user pid=31148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171548001.123:1322): user pid=31148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171548001.126:1323): user pid=31150 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171548001.126:1324): login pid=31150 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171548001.127:1325): user pid=31149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171548001.127:1326): user pid=31149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171548001.136:1327): user pid=31150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171548001.137:1328): user pid=31150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171548001.150:1329): user pid=31148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171548001.150:1330): user pid=31148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171548061.458:1331): user pid=31170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171548061.459:1332): login pid=31170 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171548061.463:1333): user pid=31170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171548061.463:1334): user pid=31170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171548062.345:1335): user pid=31170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171548062.346:1336): user pid=31170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171548301.353:1337): user pid=31209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171548301.354:1338): login pid=31209 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171548301.356:1339): user pid=31209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171548301.356:1340): user pid=31209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171548601.684:1341): user pid=31256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171548601.685:1342): user pid=31255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171548601.685:1343): login pid=31256 uid=0 old auid=4294967295 new auid=111 >type=LOGIN msg=audit(1171548601.685:1344): login pid=31255 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171548601.690:1345): user pid=31256 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171548601.690:1346): user pid=31256 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171548601.695:1347): user pid=31255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171548601.695:1348): user pid=31255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171548601.717:1349): user pid=31255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171548601.718:1350): user pid=31255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171548901.016:1351): user pid=31291 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171548901.016:1352): login pid=31291 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171548901.019:1353): user pid=31291 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171548901.020:1354): user pid=31291 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171549201.346:1355): user pid=31327 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171549201.346:1356): login pid=31327 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171549201.348:1357): user pid=31328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171549201.349:1358): login pid=31328 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171549201.350:1359): user pid=31327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171549201.351:1360): user pid=31327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171549201.354:1361): user pid=31328 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171549201.354:1362): user pid=31328 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171549201.367:1363): user pid=31327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171549201.367:1364): user pid=31327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171549501.679:1365): user pid=31367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171549501.679:1366): login pid=31367 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171549501.682:1367): user pid=31367 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171549501.682:1368): user pid=31367 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171549634.204:1369): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171549634.204:1369): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171549634.204:1369): path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171549634.204:1370): avc: denied { link } for pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171549634.204:1370): arch=c000003e syscall=86 success=yes exit=0 a0=30b0580 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171549634.204:1371): avc: denied { unlink } for pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171549634.204:1371): arch=c000003e syscall=87 success=yes exit=0 a0=30b0580 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171549634.206:1372): avc: denied { write } for pid=3451 comm="spamd" name="bayes_seen" dev=dm-0 ino=15630939 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171549634.206:1372): arch=c000003e syscall=2 success=yes exit=8 a0=2ac55d0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171549634.206:1373): avc: denied { setattr } for pid=3451 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171549634.206:1373): arch=c000003e syscall=132 success=yes exit=0 a0=3095f40 a1=7fffbe9f5460 a2=37a0b12b60 a3=1f32860 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171549634.207:1374): avc: denied { rename } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171549634.207:1374): arch=c000003e syscall=82 success=yes exit=0 a0=33590e0 a1=31ab9e0 a2=37a0b1227e a3=8 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171549634.207:1375): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal.old" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171549634.207:1375): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171549634.207:1375): path="/home/dhighley/.spamassassin/bayes_journal.old" >type=AVC msg=audit(1171549634.466:1376): avc: denied { unlink } for pid=3451 comm="spamd" name="bayes_journal.old" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171549634.466:1376): arch=c000003e syscall=87 success=yes exit=0 a0=31ab9e0 a1=1de95d0 a2=37a0b12b60 a3=3075040 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171549641.240:1377): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171549641.240:1377): arch=c000003e syscall=1 success=yes exit=1896 a0=9 a1=30aec90 a2=768 a3=11 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171549641.240:1377): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171549641.250:1378): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171549641.250:1378): arch=c000003e syscall=2 success=yes exit=8 a0=31e70a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171549646.296:1379): avc: denied { search } for pid=31401 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171549646.296:1379): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171549646.296:1380): avc: denied { getattr } for pid=31401 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171549646.296:1380): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff0f0fbff0 a2=7fff0f0fbff0 a3=6c6280 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171549646.296:1380): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171549646.296:1381): avc: denied { read } for pid=31401 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171549646.296:1381): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171549646.297:1382): avc: denied { search } for pid=31401 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171549646.297:1382): avc: denied { write } for pid=31401 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171549646.297:1382): avc: denied { add_name } for pid=31401 comm="pyzor" name="j1G-94" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171549646.297:1382): avc: denied { create } for pid=31401 comm="pyzor" name="j1G-94" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171549646.297:1382): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171549646.298:1383): avc: denied { getattr } for pid=31401 comm="pyzor" name="j1G-94" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171549646.298:1383): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff0f0fa8f0 a2=7fff0f0fa8f0 a3=2 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171549646.298:1383): path="/tmp/j1G-94" >type=AVC msg=audit(1171549646.298:1384): avc: denied { write } for pid=31401 comm="pyzor" name="j1G-94" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171549646.298:1384): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cf864 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171549646.298:1384): path="/tmp/j1G-94" >type=AVC msg=audit(1171549646.298:1385): avc: denied { remove_name } for pid=31401 comm="pyzor" name="j1G-94" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171549646.298:1385): avc: denied { unlink } for pid=31401 comm="pyzor" name="j1G-94" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171549646.298:1385): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171549646.300:1386): avc: denied { read } for pid=31401 comm="pyzor" name="tmphpDHPu" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171549646.300:1386): arch=c000003e syscall=0 success=yes exit=532 a0=4 a1=2aaaaf34d000 a2=1000 a3=5d items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171549646.300:1386): path=2F746D702F746D70687044485075202864656C6574656429 >type=AVC msg=audit(1171549651.261:1387): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171549651.261:1387): arch=c000003e syscall=62 success=yes exit=0 a0=7aa9 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171549801.008:1388): user pid=31414 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171549801.008:1389): login pid=31414 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171549801.009:1390): user pid=31413 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171549801.009:1391): login pid=31413 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171549801.011:1392): user pid=31414 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171549801.012:1393): user pid=31414 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171549801.016:1394): user pid=31413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171549801.016:1395): user pid=31413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171549801.035:1396): user pid=31413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171549801.036:1397): user pid=31413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171550101.333:1398): user pid=31453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171550101.333:1399): login pid=31453 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171550101.336:1400): user pid=31453 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171550101.336:1401): user pid=31453 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171550401.656:1402): user pid=31488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171550401.656:1403): login pid=31488 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171550401.658:1404): user pid=31489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171550401.658:1405): login pid=31489 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171550401.660:1406): user pid=31488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171550401.660:1407): user pid=31488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171550401.662:1408): user pid=31489 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171550401.662:1409): user pid=31489 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171550401.680:1410): user pid=31488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171550401.681:1411): user pid=31488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171550701.986:1412): user pid=31523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171550701.986:1413): login pid=31523 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171550701.989:1414): user pid=31523 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171550701.989:1415): user pid=31523 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171551001.324:1416): user pid=31558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171551001.324:1417): login pid=31558 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171551001.326:1418): user pid=31559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171551001.326:1419): login pid=31559 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171551001.328:1420): user pid=31558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171551001.328:1421): user pid=31558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171551001.331:1422): user pid=31559 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171551001.331:1423): user pid=31559 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171551001.350:1424): user pid=31558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171551001.351:1425): user pid=31558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171551025.251:1426): avc: denied { write } for pid=31577 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171551025.251:1426): avc: denied { add_name } for pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171551025.251:1426): avc: denied { create } for pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171551025.251:1426): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=31574 pid=31577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171551025.252:1427): avc: denied { write } for pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171551025.252:1427): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=31574 pid=31577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171551025.252:1427): path="/home/dhighley/_ZtH.xMH1FB.douglas" >type=AVC msg=audit(1171551025.252:1428): avc: denied { getattr } for pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171551025.252:1428): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff4dffd9f0 a2=7fff4dffd9f0 a3=61b650 items=0 ppid=31574 pid=31577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171551025.252:1428): path="/home/dhighley/_ZtH.xMH1FB.douglas" >type=AVC msg=audit(1171551025.252:1429): avc: denied { link } for pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171551025.252:1429): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61f7f0 a2=7fff4dffd910 a3=61b650 items=0 ppid=31574 pid=31577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171551025.252:1430): avc: denied { remove_name } for pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171551025.252:1430): avc: denied { unlink } for pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171551025.252:1430): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61f7f0 a2=7fff4dffd910 a3=61b650 items=0 ppid=31574 pid=31577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171551025.252:1431): avc: denied { append } for pid=31577 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171551025.252:1431): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=31574 pid=31577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1171551180.546:1432): user pid=31597 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171551180.547:1433): user pid=31597 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171551180.556:1434): user pid=31597 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171551180.557:1435): login pid=31597 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171551180.557:1436): user pid=31597 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171551180.625:1437): user pid=31600 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=CRED_REFR msg=audit(1171551180.634:1438): user pid=31600 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1171551222.041:1439): user pid=31597 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171551222.042:1440): user pid=31597 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171551301.666:1441): user pid=31655 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171551301.666:1442): login pid=31655 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171551301.669:1443): user pid=31655 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171551301.669:1444): user pid=31655 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171551333.982:1445): user pid=31669 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171551333.985:1446): user pid=31669 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171551333.986:1447): login pid=31669 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171551333.986:1448): user pid=31669 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1171551333.995:1449): user pid=31674 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171551334.086:1450): user pid=31669 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=CRED_DISP msg=audit(1171551548.520:1451): user pid=31669 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171551548.520:1452): user pid=31669 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171551601.004:1453): user pid=31741 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171551601.005:1454): login pid=31741 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171551601.007:1455): user pid=31742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171551601.007:1456): login pid=31742 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171551601.009:1457): user pid=31741 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171551601.009:1458): user pid=31741 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171551601.012:1459): user pid=31742 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171551601.012:1460): user pid=31742 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171551601.030:1461): user pid=31741 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171551601.030:1462): user pid=31741 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171551661.348:1463): user pid=31756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171551661.348:1464): login pid=31756 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171551661.352:1465): user pid=31756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171551661.353:1466): user pid=31756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171551662.241:1467): user pid=31756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171551662.242:1468): user pid=31756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171551877.468:1469): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171551877.468:1469): arch=c000003e syscall=2 success=yes exit=8 a0=341f120 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171551877.471:1470): avc: denied { ioctl } for pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171551877.471:1470): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171551877.471:1470): path="/home/dhighley/.razor/server.c123.cloudmark.com.conf" >type=AVC msg=audit(1171551878.651:1471): avc: denied { search } for pid=31806 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171551878.651:1471): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171551878.651:1472): avc: denied { getattr } for pid=31806 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171551878.651:1472): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffd7153260 a2=7fffd7153260 a3=6c6280 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171551878.651:1472): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171551878.651:1473): avc: denied { read } for pid=31806 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171551878.651:1473): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171551878.653:1474): avc: denied { search } for pid=31806 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171551878.653:1474): avc: denied { write } for pid=31806 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171551878.653:1474): avc: denied { add_name } for pid=31806 comm="pyzor" name="34HpCH" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171551878.653:1474): avc: denied { create } for pid=31806 comm="pyzor" name="34HpCH" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171551878.653:1474): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171551878.653:1475): avc: denied { getattr } for pid=31806 comm="pyzor" name="34HpCH" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171551878.653:1475): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd71510d0 a2=7fffd71510d0 a3=3 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171551878.653:1475): path="/tmp/34HpCH" >type=AVC msg=audit(1171551878.653:1476): avc: denied { write } for pid=31806 comm="pyzor" name="34HpCH" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171551878.653:1476): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef159b4 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171551878.653:1476): path="/tmp/34HpCH" >type=AVC msg=audit(1171551878.653:1477): avc: denied { remove_name } for pid=31806 comm="pyzor" name="34HpCH" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171551878.653:1477): avc: denied { unlink } for pid=31806 comm="pyzor" name="34HpCH" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171551878.653:1477): arch=c000003e syscall=87 success=yes exit=0 a0=6d9f30 a1=622660 a2=37a8f2f4d8 a3=6d9f30 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171551878.655:1478): avc: denied { read } for pid=31806 comm="pyzor" name="tmpyQ6cIU" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171551878.655:1478): arch=c000003e syscall=0 success=yes exit=1555 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171551878.655:1478): path=2F746D702F746D70795136634955202864656C6574656429 >type=AVC msg=audit(1171551883.612:1479): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171551883.612:1479): arch=c000003e syscall=62 success=yes exit=0 a0=7c3e a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171551884.026:1480): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171551884.026:1480): arch=c000003e syscall=2 success=yes exit=8 a0=341a790 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171551901.249:1481): user pid=31810 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171551901.250:1482): login pid=31810 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171551901.253:1483): user pid=31810 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171551901.253:1484): user pid=31810 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171552201.587:1485): user pid=31844 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171552201.587:1486): login pid=31844 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171552201.590:1487): user pid=31845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171552201.590:1488): login pid=31845 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171552201.591:1489): user pid=31844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171552201.591:1490): user pid=31844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171552201.595:1491): user pid=31845 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171552201.595:1492): user pid=31845 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171552201.619:1493): user pid=31844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171552201.620:1494): user pid=31844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171552461.255:1495): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171552461.255:1495): arch=c000003e syscall=2 success=yes exit=11 a0=3080f20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171552461.255:1496): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171552461.255:1496): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171552461.255:1496): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171552461.264:1497): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171552461.264:1497): arch=c000003e syscall=2 success=yes exit=8 a0=33d1030 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171552461.266:1498): avc: denied { ioctl } for pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171552461.266:1498): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171552461.266:1498): path="/home/dhighley/.razor/server.c123.cloudmark.com.conf" >type=AVC msg=audit(1171552466.309:1499): avc: denied { search } for pid=31892 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171552466.309:1499): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31892 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171552466.310:1500): avc: denied { search } for pid=31892 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171552466.310:1500): avc: denied { write } for pid=31892 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171552466.310:1500): avc: denied { add_name } for pid=31892 comm="pyzor" name="4jTuY0" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171552466.310:1500): avc: denied { create } for pid=31892 comm="pyzor" name="4jTuY0" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171552466.310:1500): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=31892 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171552466.311:1501): avc: denied { getattr } for pid=31892 comm="pyzor" name="4jTuY0" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171552466.311:1501): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff9813f7c0 a2=7fff9813f7c0 a3=3 items=0 ppid=3451 pid=31892 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171552466.311:1501): path="/tmp/4jTuY0" >type=AVC msg=audit(1171552466.312:1502): avc: denied { write } for pid=31892 comm="pyzor" name="4jTuY0" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171552466.312:1502): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15864 items=0 ppid=3451 pid=31892 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171552466.312:1502): path="/tmp/4jTuY0" >type=AVC msg=audit(1171552466.312:1503): avc: denied { remove_name } for pid=31892 comm="pyzor" name="4jTuY0" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171552466.312:1503): avc: denied { unlink } for pid=31892 comm="pyzor" name="4jTuY0" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171552466.312:1503): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=31892 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171552466.318:1504): avc: denied { read } for pid=31892 comm="pyzor" name="tmpU1iN2k" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171552466.318:1504): arch=c000003e syscall=0 success=yes exit=647 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=31892 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171552466.318:1504): path=2F746D702F746D705531694E326B202864656C6574656429 >type=AVC msg=audit(1171552471.284:1505): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171552471.284:1505): arch=c000003e syscall=86 success=yes exit=0 a0=326f090 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171552471.284:1506): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171552471.284:1506): arch=c000003e syscall=87 success=yes exit=0 a0=326f090 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171552471.285:1507): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171552471.285:1507): arch=c000003e syscall=2 success=yes exit=9 a0=30ae020 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171552471.307:1508): avc: denied { write } for pid=31887 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171552471.307:1508): avc: denied { add_name } for pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171552471.307:1508): avc: denied { create } for pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171552471.307:1508): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=31882 pid=31887 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171552471.307:1509): avc: denied { write } for pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171552471.307:1509): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=31882 pid=31887 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171552471.307:1509): path="/home/dhighley/_PyH.XjH1FB.douglas" >type=AVC msg=audit(1171552471.307:1510): avc: denied { getattr } for pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171552471.307:1510): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff060c3ac0 a2=7fff060c3ac0 a3=61b650 items=0 ppid=31882 pid=31887 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171552471.307:1510): path="/home/dhighley/_PyH.XjH1FB.douglas" >type=AVC msg=audit(1171552471.307:1511): avc: denied { link } for pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171552471.307:1511): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61cf20 a2=7fff060c39e0 a3=61b650 items=0 ppid=31882 pid=31887 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171552471.308:1512): avc: denied { remove_name } for pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171552471.308:1512): avc: denied { unlink } for pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171552471.308:1512): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61cf20 a2=7fff060c39e0 a3=61b650 items=0 ppid=31882 pid=31887 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171552471.308:1513): avc: denied { append } for pid=31887 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171552471.308:1513): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=31882 pid=31887 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171552501.919:1514): user pid=31895 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171552501.919:1515): login pid=31895 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171552501.921:1516): user pid=31895 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171552501.921:1517): user pid=31895 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171552801.256:1518): user pid=31950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171552801.257:1519): user pid=31949 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171552801.257:1520): login pid=31950 uid=0 old auid=4294967295 new auid=111 >type=LOGIN msg=audit(1171552801.257:1521): login pid=31949 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171552801.262:1522): user pid=31950 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171552801.262:1523): user pid=31950 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171552801.266:1524): user pid=31949 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171552801.266:1525): user pid=31949 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171552801.287:1526): user pid=31949 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171552801.287:1527): user pid=31949 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171553082.963:1528): avc: denied { write } for pid=31994 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171553082.963:1528): avc: denied { add_name } for pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171553082.963:1528): avc: denied { create } for pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171553082.963:1528): arch=c000003e syscall=2 success=yes exit=6 a0=61e000 a1=c1 a2=124 a3=61e000 items=0 ppid=31989 pid=31994 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171553082.963:1529): avc: denied { write } for pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171553082.963:1529): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61e000 items=0 ppid=31989 pid=31994 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171553082.963:1529): path="/home/dhighley/_6zH.6sH1FB.douglas" >type=AVC msg=audit(1171553082.963:1530): avc: denied { getattr } for pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171553082.963:1530): arch=c000003e syscall=4 success=yes exit=0 a0=61e000 a1=7fff95287c90 a2=7fff95287c90 a3=61e000 items=0 ppid=31989 pid=31994 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171553082.963:1530): path="/home/dhighley/_6zH.6sH1FB.douglas" >type=AVC msg=audit(1171553082.963:1531): avc: denied { link } for pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171553082.963:1531): arch=c000003e syscall=86 success=yes exit=0 a0=61e000 a1=61e200 a2=7fff95287bb0 a3=61e000 items=0 ppid=31989 pid=31994 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171553082.964:1532): avc: denied { remove_name } for pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171553082.964:1532): avc: denied { unlink } for pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171553082.964:1532): arch=c000003e syscall=87 success=yes exit=0 a0=61e000 a1=61e200 a2=7fff95287bb0 a3=61e000 items=0 ppid=31989 pid=31994 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171553101.586:1533): user pid=32001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171553101.586:1534): login pid=32001 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171553101.588:1535): user pid=32001 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171553101.588:1536): user pid=32001 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171553401.918:1537): user pid=32033 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171553401.918:1538): login pid=32033 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171553401.920:1539): user pid=32034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171553401.920:1540): login pid=32034 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171553401.922:1541): user pid=32033 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171553401.922:1542): user pid=32033 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171553401.927:1543): user pid=32034 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171553401.927:1544): user pid=32034 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171553401.943:1545): user pid=32033 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171553401.943:1546): user pid=32033 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171553701.257:1547): user pid=32071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171553701.257:1548): login pid=32071 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171553701.261:1549): user pid=32071 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171553701.261:1550): user pid=32071 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171554001.585:1551): user pid=32108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171554001.585:1552): login pid=32108 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171554001.587:1553): user pid=32109 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171554001.587:1554): login pid=32109 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171554001.589:1555): user pid=32108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171554001.589:1556): user pid=32108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171554001.593:1557): user pid=32109 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171554001.593:1558): user pid=32109 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171554001.610:1559): user pid=32108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171554001.610:1560): user pid=32108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171554301.925:1561): user pid=32154 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171554301.925:1562): login pid=32154 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171554301.928:1563): user pid=32154 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171554301.928:1564): user pid=32154 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171554370.780:1565): avc: denied { getattr } for pid=32178 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171554370.780:1565): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff94c15b10 a2=7fff94c15b10 a3=6c6280 items=0 ppid=3451 pid=32178 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171554370.780:1565): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171554370.780:1566): avc: denied { read } for pid=32178 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171554370.780:1566): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=32178 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171554375.743:1567): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171554375.743:1567): arch=c000003e syscall=62 success=yes exit=0 a0=7db2 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171554601.251:1568): user pid=32197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171554601.251:1569): login pid=32197 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171554601.253:1570): user pid=32198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171554601.254:1571): login pid=32198 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171554601.257:1572): user pid=32197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171554601.257:1573): user pid=32197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171554601.260:1574): user pid=32198 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171554601.260:1575): user pid=32198 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171554601.275:1576): user pid=32197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171554601.275:1577): user pid=32197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171554901.598:1578): user pid=32234 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171554901.598:1579): login pid=32234 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171554901.601:1580): user pid=32234 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171554901.601:1581): user pid=32234 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171555201.922:1582): user pid=32268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171555201.922:1583): login pid=32268 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171555201.924:1584): user pid=32269 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171555201.924:1585): login pid=32269 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171555201.925:1586): user pid=32268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171555201.925:1587): user pid=32268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171555201.933:1588): user pid=32269 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171555201.933:1589): user pid=32269 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171555201.944:1590): user pid=32268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171555201.944:1591): user pid=32268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171555261.262:1592): user pid=32286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171555261.262:1593): login pid=32286 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171555261.266:1594): user pid=32286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171555261.266:1595): user pid=32286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171555262.158:1596): user pid=32286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171555262.159:1597): user pid=32286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171555501.165:1598): user pid=32325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171555501.165:1599): login pid=32325 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171555501.168:1600): user pid=32325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171555501.168:1601): user pid=32325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171555801.489:1602): user pid=32361 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171555801.489:1603): login pid=32361 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171555801.492:1604): user pid=32362 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171555801.492:1605): login pid=32362 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171555801.495:1606): user pid=32361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171555801.495:1607): user pid=32361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171555801.497:1608): user pid=32362 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171555801.497:1609): user pid=32362 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171555801.522:1610): user pid=32361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171555801.523:1611): user pid=32361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171555856.914:1612): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171555856.914:1612): arch=c000003e syscall=2 success=yes exit=11 a0=33d1320 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171555856.914:1613): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171555856.914:1613): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171555856.914:1613): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171555856.922:1614): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171555856.922:1614): arch=c000003e syscall=2 success=yes exit=8 a0=c24800 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171555856.924:1615): avc: denied { ioctl } for pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171555856.924:1615): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171555856.924:1615): path="/home/dhighley/.razor/server.c123.cloudmark.com.conf" >type=AVC msg=audit(1171555857.704:1616): avc: denied { search } for pid=32388 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171555857.704:1616): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=32388 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171555857.705:1617): avc: denied { search } for pid=32388 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171555857.705:1617): avc: denied { write } for pid=32388 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171555857.705:1617): avc: denied { add_name } for pid=32388 comm="pyzor" name="HCQDxv" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171555857.705:1617): avc: denied { create } for pid=32388 comm="pyzor" name="HCQDxv" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171555857.705:1617): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=32388 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171555857.706:1618): avc: denied { getattr } for pid=32388 comm="pyzor" name="HCQDxv" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171555857.706:1618): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffc74fc8e0 a2=7fffc74fc8e0 a3=3 items=0 ppid=3451 pid=32388 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171555857.706:1618): path="/tmp/HCQDxv" >type=AVC msg=audit(1171555857.706:1619): avc: denied { write } for pid=32388 comm="pyzor" name="HCQDxv" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171555857.706:1619): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15864 items=0 ppid=3451 pid=32388 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171555857.706:1619): path="/tmp/HCQDxv" >type=AVC msg=audit(1171555857.706:1620): avc: denied { remove_name } for pid=32388 comm="pyzor" name="HCQDxv" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171555857.706:1620): avc: denied { unlink } for pid=32388 comm="pyzor" name="HCQDxv" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171555857.706:1620): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=32388 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171555857.708:1621): avc: denied { read } for pid=32388 comm="pyzor" name="tmpykcE8U" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171555857.708:1621): arch=c000003e syscall=0 success=yes exit=676 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=32388 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171555857.708:1621): path=2F746D702F746D70796B63453855202864656C6574656429 >type=AVC msg=audit(1171555862.679:1622): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171555862.679:1622): arch=c000003e syscall=86 success=yes exit=0 a0=3077330 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171555862.679:1623): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171555862.679:1623): arch=c000003e syscall=87 success=yes exit=0 a0=3077330 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171555862.680:1624): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171555862.680:1624): arch=c000003e syscall=2 success=yes exit=8 a0=321b720 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171555862.700:1625): avc: denied { append } for pid=32384 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171555862.700:1625): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=32379 pid=32384 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1171555987.438:1626): user pid=31149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171555987.439:1627): user pid=31149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171556101.444:1628): user pid=32410 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171556101.445:1629): login pid=32410 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171556101.448:1630): user pid=32410 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171556101.448:1631): user pid=32410 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171556401.769:1632): user pid=32451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171556401.769:1633): login pid=32451 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171556401.771:1634): user pid=32452 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171556401.771:1635): login pid=32452 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171556401.773:1636): user pid=32451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171556401.773:1637): user pid=32451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171556401.776:1638): user pid=32452 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171556401.777:1639): user pid=32452 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171556401.802:1640): user pid=32451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171556401.802:1641): user pid=32451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171556701.108:1642): user pid=32487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171556701.108:1643): login pid=32487 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171556701.111:1644): user pid=32487 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171556701.111:1645): user pid=32487 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171557001.434:1646): user pid=32520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171557001.434:1647): login pid=32520 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171557001.437:1648): user pid=32521 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171557001.437:1649): login pid=32521 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171557001.438:1650): user pid=32520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171557001.438:1651): user pid=32520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171557001.443:1652): user pid=32521 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171557001.444:1653): user pid=32521 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171557001.468:1654): user pid=32520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171557001.468:1655): user pid=32520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171557214.637:1656): avc: denied { write } for pid=32555 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171557214.637:1656): avc: denied { add_name } for pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171557214.637:1656): avc: denied { create } for pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171557214.637:1656): arch=c000003e syscall=2 success=yes exit=6 a0=61c9b0 a1=c1 a2=124 a3=61c9b0 items=0 ppid=32550 pid=32555 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171557214.637:1657): avc: denied { write } for pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171557214.637:1657): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c9b0 items=0 ppid=32550 pid=32555 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171557214.637:1657): path="/home/dhighley/_r8H.etI1FB.douglas" >type=AVC msg=audit(1171557214.637:1658): avc: denied { getattr } for pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171557214.637:1658): arch=c000003e syscall=4 success=yes exit=0 a0=61c9b0 a1=7fff6bc0f610 a2=7fff6bc0f610 a3=61c9b0 items=0 ppid=32550 pid=32555 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171557214.637:1658): path="/home/dhighley/_r8H.etI1FB.douglas" >type=AVC msg=audit(1171557214.637:1659): avc: denied { link } for pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171557214.637:1659): arch=c000003e syscall=86 success=yes exit=0 a0=61c9b0 a1=61b520 a2=7fff6bc0f530 a3=61c9b0 items=0 ppid=32550 pid=32555 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171557214.638:1660): avc: denied { remove_name } for pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171557214.638:1660): avc: denied { unlink } for pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171557214.638:1660): arch=c000003e syscall=87 success=yes exit=0 a0=61c9b0 a1=61b520 a2=7fff6bc0f530 a3=61c9b0 items=0 ppid=32550 pid=32555 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171557301.777:1661): user pid=32569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171557301.777:1662): login pid=32569 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171557301.780:1663): user pid=32569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171557301.780:1664): user pid=32569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171557601.105:1665): user pid=32604 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171557601.105:1666): login pid=32604 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171557601.106:1667): user pid=32603 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171557601.106:1668): login pid=32603 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171557601.109:1669): user pid=32603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171557601.109:1670): user pid=32603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171557601.111:1671): user pid=32604 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171557601.111:1672): user pid=32604 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171557601.137:1673): user pid=32603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171557601.137:1674): user pid=32603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171557901.437:1675): user pid=32638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171557901.437:1676): login pid=32638 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171557901.441:1677): user pid=32638 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171557901.441:1678): user pid=32638 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171558201.763:1679): user pid=32674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171558201.763:1680): login pid=32674 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171558201.764:1681): user pid=32673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171558201.764:1682): login pid=32673 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171558201.767:1683): user pid=32673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171558201.767:1684): user pid=32673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171558201.768:1685): user pid=32674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171558201.768:1686): user pid=32674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171558201.783:1687): user pid=32673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171558201.784:1688): user pid=32673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171558501.106:1689): user pid=32717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171558501.106:1690): login pid=32717 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171558501.110:1691): user pid=32717 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171558501.110:1692): user pid=32717 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171558801.432:1693): user pid=32750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171558801.432:1694): login pid=32750 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171558801.434:1695): user pid=32751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171558801.434:1696): login pid=32751 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171558801.436:1697): user pid=32750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171558801.436:1698): user pid=32750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171558801.439:1699): user pid=32752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171558801.439:1700): login pid=32752 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171558801.440:1701): user pid=32751 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171558801.440:1702): user pid=32751 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171558801.452:1703): user pid=32752 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171558801.452:1704): user pid=32752 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171558801.457:1705): user pid=32750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171558801.457:1706): user pid=32750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171558861.770:1707): user pid=303 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171558861.770:1708): login pid=303 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171558861.773:1709): user pid=303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171558861.773:1710): user pid=303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171558862.658:1711): user pid=303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171558862.658:1712): user pid=303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171559101.665:1713): user pid=343 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171559101.665:1714): login pid=343 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171559101.668:1715): user pid=343 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171559101.668:1716): user pid=343 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171559401.994:1717): user pid=378 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171559401.994:1718): login pid=378 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171559401.997:1719): user pid=379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171559401.997:1720): login pid=379 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171559401.999:1721): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171559401.999:1722): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171559402.007:1723): user pid=379 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171559402.007:1724): user pid=379 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171559402.020:1725): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171559402.020:1726): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171559701.338:1727): user pid=424 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171559701.338:1728): login pid=424 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171559701.341:1729): user pid=424 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171559701.341:1730): user pid=424 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171559746.493:1731): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171559746.493:1731): arch=c000003e syscall=2 success=yes exit=8 a0=32236d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171559746.495:1732): avc: denied { ioctl } for pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171559746.495:1732): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171559746.495:1732): path="/home/dhighley/.razor/server.c123.cloudmark.com.conf" >type=AVC msg=audit(1171559747.823:1733): avc: denied { getattr } for pid=444 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171559747.823:1733): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffde855750 a2=7fffde855750 a3=6c6280 items=0 ppid=3451 pid=444 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171559747.823:1733): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171559747.823:1734): avc: denied { read } for pid=444 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171559747.823:1734): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=444 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171559752.786:1735): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171559752.786:1735): arch=c000003e syscall=62 success=yes exit=0 a0=1bc a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171559752.794:1736): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171559752.794:1736): arch=c000003e syscall=2 success=yes exit=8 a0=31b1cd0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171560001.660:1737): user pid=475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171560001.661:1738): login pid=475 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171560001.662:1739): user pid=476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171560001.662:1740): login pid=476 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171560001.667:1741): user pid=475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171560001.667:1742): user pid=475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171560001.672:1743): user pid=476 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171560001.672:1744): user pid=476 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171560001.686:1745): user pid=475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171560001.686:1746): user pid=475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171560301.995:1747): user pid=511 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171560301.995:1748): login pid=511 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171560302.000:1749): user pid=511 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171560302.000:1750): user pid=511 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171560601.320:1751): user pid=546 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171560601.320:1752): login pid=546 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171560601.320:1753): user pid=545 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171560601.321:1754): login pid=545 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171560601.326:1755): user pid=546 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171560601.326:1756): user pid=546 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171560601.332:1757): user pid=545 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171560601.332:1758): user pid=545 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171560601.353:1759): user pid=545 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171560601.353:1760): user pid=545 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171560901.650:1761): user pid=587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171560901.650:1762): login pid=587 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171560901.653:1763): user pid=587 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171560901.653:1764): user pid=587 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171561201.973:1765): user pid=622 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171561201.973:1766): login pid=622 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171561201.974:1767): user pid=621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171561201.974:1768): login pid=621 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171561201.977:1769): user pid=621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171561201.977:1770): user pid=621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171561201.979:1771): user pid=622 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171561201.979:1772): user pid=622 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171561201.996:1773): user pid=621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171561201.996:1774): user pid=621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171561501.303:1775): user pid=662 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171561501.304:1776): login pid=662 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171561501.308:1777): user pid=662 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171561501.308:1778): user pid=662 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171561774.126:1779): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171561774.126:1779): arch=c000003e syscall=2 success=yes exit=11 a0=34166d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171561774.126:1780): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171561774.126:1780): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171561774.126:1780): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171561779.191:1781): avc: denied { search } for pid=714 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171561779.191:1781): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=714 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171561779.192:1782): avc: denied { search } for pid=714 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171561779.192:1782): avc: denied { write } for pid=714 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171561779.192:1782): avc: denied { add_name } for pid=714 comm="pyzor" name="0d5Nv1" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171561779.192:1782): avc: denied { create } for pid=714 comm="pyzor" name="0d5Nv1" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171561779.192:1782): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=714 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171561779.193:1783): avc: denied { getattr } for pid=714 comm="pyzor" name="0d5Nv1" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171561779.193:1783): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffff8668e60 a2=7ffff8668e60 a3=2 items=0 ppid=3451 pid=714 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171561779.193:1783): path="/tmp/0d5Nv1" >type=AVC msg=audit(1171561779.193:1784): avc: denied { write } for pid=714 comm="pyzor" name="0d5Nv1" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171561779.193:1784): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cff84 items=0 ppid=3451 pid=714 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171561779.193:1784): path="/tmp/0d5Nv1" >type=AVC msg=audit(1171561779.193:1785): avc: denied { remove_name } for pid=714 comm="pyzor" name="0d5Nv1" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171561779.193:1785): avc: denied { unlink } for pid=714 comm="pyzor" name="0d5Nv1" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171561779.193:1785): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=714 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171561779.231:1786): avc: denied { read } for pid=714 comm="pyzor" name="tmpU_3IV2" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171561779.231:1786): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=2761 items=0 ppid=3451 pid=714 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171561779.231:1786): path=2F746D702F746D70555F33495632202864656C6574656429 >type=AVC msg=audit(1171561779.342:1787): avc: denied { append } for pid=3452 comm="spamd" name="bayes_journal" dev=dm-0 ino=12485716 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171561779.342:1787): arch=c000003e syscall=2 success=yes exit=12 a0=3265510 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3452 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171561784.410:1788): avc: denied { getattr } for pid=716 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171561784.410:1788): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff201ef0f0 a2=7fff201ef0f0 a3=6c6280 items=0 ppid=3452 pid=716 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171561784.410:1788): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171561784.410:1789): avc: denied { read } for pid=716 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171561784.410:1789): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3452 pid=716 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171561786.239:1790): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171561786.239:1790): arch=c000003e syscall=86 success=yes exit=0 a0=32186d0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171561786.240:1791): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171561786.240:1791): arch=c000003e syscall=87 success=yes exit=0 a0=32186d0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171561786.300:1792): avc: denied { append } for pid=700 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171561786.300:1792): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=695 pid=700 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171561789.482:1793): avc: denied { getattr } for pid=710 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171561789.482:1793): arch=c000003e syscall=4 success=yes exit=0 a0=619450 a1=7ffff8276c30 a2=7ffff8276c30 a3=619453 items=0 ppid=705 pid=710 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171561789.482:1793): path="/home/phighley/spamlog" >type=AVC msg=audit(1171561789.483:1794): avc: denied { append } for pid=710 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171561789.483:1794): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=705 pid=710 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171561789.483:1795): avc: denied { lock } for pid=710 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171561789.483:1795): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=705 pid=710 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171561789.483:1795): path="/home/phighley/spamlog" >type=USER_ACCT msg=audit(1171561801.630:1796): user pid=719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171561801.631:1797): login pid=719 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171561801.633:1798): user pid=720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171561801.633:1799): login pid=720 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171561801.635:1800): user pid=719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171561801.635:1801): user pid=719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171561801.638:1802): user pid=720 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171561801.638:1803): user pid=720 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171561801.655:1804): user pid=719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171561801.656:1805): user pid=719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171562101.977:1806): user pid=757 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171562101.977:1807): login pid=757 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171562101.981:1808): user pid=757 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171562101.981:1809): user pid=757 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171562401.303:1810): user pid=792 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171562401.303:1812): login pid=792 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171562401.303:1811): user pid=791 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171562401.303:1813): login pid=791 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171562401.309:1814): user pid=792 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171562401.309:1815): user pid=792 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171562401.312:1816): user pid=791 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171562401.312:1817): user pid=791 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171562401.335:1818): user pid=791 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171562401.335:1819): user pid=791 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171562461.636:1820): user pid=806 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171562461.636:1821): login pid=806 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171562461.640:1822): user pid=806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171562461.640:1823): user pid=806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171562462.549:1824): user pid=806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171562462.550:1825): user pid=806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171562701.556:1826): user pid=847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171562701.557:1827): login pid=847 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171562701.560:1828): user pid=847 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171562701.560:1829): user pid=847 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171562755.348:1830): avc: denied { write } for pid=870 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171562755.348:1830): avc: denied { add_name } for pid=870 comm="procmail" name="_mN.DEK1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171562755.348:1830): avc: denied { create } for pid=870 comm="procmail" name="_mN.DEK1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171562755.348:1830): arch=c000003e syscall=2 success=yes exit=6 a0=61b460 a1=c1 a2=124 a3=61b460 items=0 ppid=862 pid=870 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171562755.349:1831): avc: denied { write } for pid=870 comm="procmail" name="_mN.DEK1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171562755.349:1831): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b460 items=0 ppid=862 pid=870 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171562755.349:1831): path="/home/dhighley/_mN.DEK1FB.douglas" >type=AVC msg=audit(1171562755.349:1832): avc: denied { getattr } for pid=870 comm="procmail" name="_mN.DEK1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171562755.349:1832): arch=c000003e syscall=4 success=yes exit=0 a0=61b460 a1=7fff01848240 a2=7fff01848240 a3=61b460 items=0 ppid=862 pid=870 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171562755.349:1832): path="/home/dhighley/_mN.DEK1FB.douglas" >type=AVC msg=audit(1171562755.349:1833): avc: denied { link } for pid=870 comm="procmail" name="_mN.DEK1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171562755.349:1833): arch=c000003e syscall=86 success=yes exit=0 a0=61b460 a1=61c890 a2=7fff01848160 a3=61b460 items=0 ppid=862 pid=870 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171562755.350:1834): avc: denied { remove_name } for pid=870 comm="procmail" name="_mN.DEK1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171562755.350:1834): avc: denied { unlink } for pid=870 comm="procmail" name="_mN.DEK1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171562755.350:1834): arch=c000003e syscall=87 success=yes exit=0 a0=61b460 a1=61c890 a2=7fff01848160 a3=61b460 items=0 ppid=862 pid=870 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171563001.884:1835): user pid=895 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171563001.884:1836): login pid=895 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171563001.887:1837): user pid=896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171563001.887:1838): login pid=896 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171563001.890:1839): user pid=895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171563001.890:1840): user pid=895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171563001.892:1841): user pid=896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171563001.892:1842): user pid=896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171563001.915:1843): user pid=895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171563001.915:1844): user pid=895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171563301.233:1845): user pid=939 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171563301.233:1846): login pid=939 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171563301.236:1847): user pid=939 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171563301.236:1848): user pid=939 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171563549.101:1849): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171563549.101:1849): arch=c000003e syscall=2 success=yes exit=8 a0=32bef70 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171563549.103:1850): avc: denied { ioctl } for pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171563549.103:1850): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171563549.103:1850): path="/home/dhighley/.razor/server.c123.cloudmark.com.conf" >type=AVC msg=audit(1171563551.910:1851): avc: denied { getattr } for pid=985 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171563551.910:1851): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff54637530 a2=7fff54637530 a3=6c6280 items=0 ppid=3451 pid=985 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171563551.910:1851): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171563551.910:1852): avc: denied { read } for pid=985 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171563551.910:1852): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=985 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171563552.102:1853): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171563552.102:1853): arch=c000003e syscall=2 success=yes exit=8 a0=2fb5f60 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171563601.569:1854): user pid=990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171563601.570:1855): login pid=990 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171563601.572:1856): user pid=991 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171563601.572:1857): login pid=991 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171563601.576:1858): user pid=990 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171563601.576:1859): user pid=990 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171563601.579:1860): user pid=991 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171563601.579:1861): user pid=991 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171563601.596:1862): user pid=990 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171563601.597:1863): user pid=990 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171563628.375:1864): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171563628.375:1864): arch=c000003e syscall=2 success=yes exit=11 a0=339abe0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171563628.375:1865): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171563628.375:1865): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171563628.375:1865): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171563632.208:1866): avc: denied { search } for pid=1014 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171563632.208:1866): avc: denied { write } for pid=1014 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171563632.208:1866): avc: denied { add_name } for pid=1014 comm="pyzor" name="xIauRS" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171563632.208:1866): avc: denied { create } for pid=1014 comm="pyzor" name="xIauRS" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171563632.208:1866): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=1014 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171563632.209:1867): avc: denied { getattr } for pid=1014 comm="pyzor" name="xIauRS" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171563632.209:1867): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff71c2c010 a2=7fff71c2c010 a3=3 items=0 ppid=3451 pid=1014 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171563632.209:1867): path="/tmp/xIauRS" >type=AVC msg=audit(1171563632.210:1868): avc: denied { write } for pid=1014 comm="pyzor" name="xIauRS" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171563632.210:1868): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15834 items=0 ppid=3451 pid=1014 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171563632.210:1868): path="/tmp/xIauRS" >type=AVC msg=audit(1171563632.210:1869): avc: denied { remove_name } for pid=1014 comm="pyzor" name="xIauRS" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171563632.210:1869): avc: denied { unlink } for pid=1014 comm="pyzor" name="xIauRS" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171563632.210:1869): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=1014 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171563632.212:1870): avc: denied { read } for pid=1014 comm="pyzor" name="tmpKAItrb" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171563632.212:1870): arch=c000003e syscall=0 success=yes exit=635 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=1014 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171563632.212:1870): path=2F746D702F746D704B4149747262202864656C6574656429 >type=AVC msg=audit(1171563637.170:1871): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171563637.170:1871): arch=c000003e syscall=62 success=yes exit=0 a0=3f6 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171563637.180:1872): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171563637.180:1872): arch=c000003e syscall=86 success=yes exit=0 a0=33bf4e0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171563637.180:1873): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171563637.180:1873): arch=c000003e syscall=87 success=yes exit=0 a0=33bf4e0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171563637.211:1874): avc: denied { append } for pid=1010 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171563637.211:1874): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=1007 pid=1010 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171563901.912:1875): user pid=1037 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171563901.912:1876): login pid=1037 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171563901.915:1877): user pid=1037 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171563901.915:1878): user pid=1037 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171564201.248:1879): user pid=1075 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171564201.248:1880): login pid=1075 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171564201.250:1881): user pid=1076 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171564201.250:1882): login pid=1076 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171564201.252:1883): user pid=1075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171564201.252:1884): user pid=1075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171564201.255:1885): user pid=1076 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171564201.255:1886): user pid=1076 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171564201.275:1887): user pid=1075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171564201.276:1888): user pid=1075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171564501.599:1889): user pid=1112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171564501.599:1890): login pid=1112 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171564501.602:1891): user pid=1112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171564501.602:1892): user pid=1112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171564801.923:1893): user pid=1145 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171564801.923:1894): login pid=1145 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171564801.925:1895): user pid=1146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171564801.925:1896): login pid=1146 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171564801.926:1897): user pid=1145 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171564801.926:1898): user pid=1145 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171564801.929:1899): user pid=1146 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171564801.929:1900): user pid=1146 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171564801.943:1901): user pid=1145 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171564801.943:1902): user pid=1145 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171565101.267:1903): user pid=1180 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171565101.267:1904): login pid=1180 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171565101.271:1905): user pid=1180 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171565101.271:1906): user pid=1180 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171565401.596:1907): user pid=1215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171565401.596:1908): login pid=1215 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171565401.599:1909): user pid=1216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171565401.599:1910): login pid=1216 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171565401.601:1911): user pid=1215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171565401.601:1912): user pid=1215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171565401.603:1913): user pid=1216 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171565401.603:1914): user pid=1216 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171565401.628:1915): user pid=1215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171565401.628:1916): user pid=1215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171565701.927:1917): user pid=1253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171565701.928:1918): login pid=1253 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171565701.931:1919): user pid=1253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171565701.931:1920): user pid=1253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171566001.263:1921): user pid=1286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171566001.263:1922): login pid=1286 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171566001.265:1923): user pid=1287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171566001.265:1924): login pid=1287 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171566001.267:1925): user pid=1286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171566001.267:1926): user pid=1286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171566001.271:1927): user pid=1287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171566001.271:1928): user pid=1287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171566001.286:1929): user pid=1286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171566001.286:1930): user pid=1286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171566061.601:1931): user pid=1301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171566061.601:1932): login pid=1301 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171566061.605:1933): user pid=1301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171566061.605:1934): user pid=1301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171566062.520:1935): user pid=1301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171566062.520:1936): user pid=1301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171566301.527:1937): user pid=1346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171566301.527:1938): login pid=1346 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171566301.530:1939): user pid=1346 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171566301.530:1940): user pid=1346 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171566601.862:1941): user pid=1378 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171566601.862:1942): login pid=1378 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171566601.863:1943): user pid=1379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171566601.863:1944): login pid=1379 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171566601.865:1945): user pid=1378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171566601.865:1946): user pid=1378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171566601.872:1947): user pid=1379 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171566601.872:1948): user pid=1379 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171566601.882:1949): user pid=1378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171566601.882:1950): user pid=1378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171566789.843:1951): user pid=32751 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171566789.843:1952): user pid=32751 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171566901.850:1953): user pid=1415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171566901.850:1954): login pid=1415 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171566901.853:1955): user pid=1415 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171566901.853:1956): user pid=1415 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171567201.171:1957): user pid=1448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171567201.171:1958): login pid=1448 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171567201.173:1959): user pid=1449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171567201.173:1960): login pid=1449 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171567201.175:1961): user pid=1448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171567201.175:1962): user pid=1448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171567201.178:1963): user pid=1449 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171567201.178:1964): user pid=1449 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171567201.192:1965): user pid=1448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171567201.192:1966): user pid=1448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171567501.511:1967): user pid=1483 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171567501.511:1968): login pid=1483 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171567501.514:1969): user pid=1483 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171567501.514:1970): user pid=1483 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171567536.262:1971): avc: denied { search } for pid=1506 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171567536.262:1971): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=1506 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171567541.572:1972): avc: denied { write } for pid=1502 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171567541.572:1972): avc: denied { add_name } for pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171567541.572:1972): avc: denied { create } for pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171567541.572:1972): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=1497 pid=1502 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171567541.573:1973): avc: denied { write } for pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171567541.573:1973): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=1497 pid=1502 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171567541.573:1973): path="/home/dhighley/_eX.1OL1FB.douglas" >type=AVC msg=audit(1171567541.573:1974): avc: denied { getattr } for pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171567541.573:1974): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff51206c00 a2=7fff51206c00 a3=61b650 items=0 ppid=1497 pid=1502 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171567541.573:1974): path="/home/dhighley/_eX.1OL1FB.douglas" >type=AVC msg=audit(1171567541.573:1975): avc: denied { link } for pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171567541.573:1975): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61e1a0 a2=7fff51206b20 a3=61b650 items=0 ppid=1497 pid=1502 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171567541.573:1976): avc: denied { remove_name } for pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171567541.573:1976): avc: denied { unlink } for pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171567541.573:1976): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e1a0 a2=7fff51206b20 a3=61b650 items=0 ppid=1497 pid=1502 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171567801.838:1977): user pid=1527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171567801.839:1978): login pid=1527 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171567801.841:1979): user pid=1528 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171567801.841:1980): login pid=1528 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171567801.842:1981): user pid=1527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171567801.842:1982): user pid=1527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171567801.851:1983): user pid=1528 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171567801.851:1984): user pid=1528 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171567801.865:1985): user pid=1527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171567801.866:1986): user pid=1527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171568101.173:1987): user pid=1573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171568101.173:1988): login pid=1573 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171568101.176:1989): user pid=1573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171568101.176:1990): user pid=1573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171568401.497:1991): user pid=1608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171568401.497:1992): login pid=1608 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171568401.499:1993): user pid=1609 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171568401.500:1994): login pid=1609 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171568401.502:1995): user pid=1608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171568401.502:1996): user pid=1608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171568401.509:1997): user pid=1609 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171568401.509:1998): user pid=1609 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171568401.521:1999): user pid=1608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171568401.522:2000): user pid=1608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171568701.845:2001): user pid=1644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171568701.845:2002): login pid=1644 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171568701.848:2003): user pid=1644 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171568701.848:2004): user pid=1644 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171569001.169:2005): user pid=1679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171569001.169:2006): login pid=1679 uid=0 old auid=4294967295 new auid=111 >type=USER_ACCT msg=audit(1171569001.170:2007): user pid=1678 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171569001.170:2008): login pid=1678 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171569001.173:2009): user pid=1678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171569001.173:2010): user pid=1678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171569001.177:2011): user pid=1679 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171569001.178:2012): user pid=1679 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171569001.203:2013): user pid=1678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171569001.204:2014): user pid=1678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171569301.500:2015): user pid=1717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171569301.500:2016): login pid=1717 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171569301.504:2017): user pid=1717 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171569301.504:2018): user pid=1717 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171569493.108:2019): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171569493.108:2019): arch=c000003e syscall=2 success=yes exit=8 a0=335f990 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171569493.111:2020): avc: denied { ioctl } for pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171569493.111:2020): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171569493.111:2020): path="/home/dhighley/.razor/server.c123.cloudmark.com.conf" >type=AVC msg=audit(1171569493.863:2021): avc: denied { getattr } for pid=1753 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171569493.863:2021): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff27ab49b0 a2=7fff27ab49b0 a3=6c6280 items=0 ppid=3451 pid=1753 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171569493.863:2021): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171569493.863:2022): avc: denied { read } for pid=1753 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171569493.863:2022): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=1753 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171569498.827:2023): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171569498.827:2023): arch=c000003e syscall=62 success=yes exit=0 a0=6d9 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171569498.999:2024): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171569498.999:2024): arch=c000003e syscall=2 success=yes exit=8 a0=10111a0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171569601.825:2025): user pid=1763 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171569601.825:2026): login pid=1763 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171569601.827:2027): user pid=1764 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171569601.828:2028): login pid=1764 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171569601.829:2029): user pid=1765 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171569601.829:2030): login pid=1765 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171569601.832:2031): user pid=1763 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171569601.832:2032): user pid=1763 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171569601.835:2033): user pid=1764 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171569601.836:2034): user pid=1764 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171569601.848:2035): user pid=1765 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171569601.849:2036): user pid=1765 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171569601.857:2037): user pid=1763 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171569601.857:2038): user pid=1763 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171569661.173:2039): user pid=1786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171569661.173:2040): login pid=1786 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171569661.177:2041): user pid=1786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171569661.177:2042): user pid=1786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171569662.061:2043): user pid=1786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171569662.061:2044): user pid=1786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171569901.069:2045): user pid=1827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171569901.069:2046): login pid=1827 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171569901.072:2047): user pid=1827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171569901.072:2048): user pid=1827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171570201.396:2049): user pid=1865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171570201.397:2050): login pid=1865 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171570201.399:2051): user pid=1866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171570201.399:2052): login pid=1866 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171570201.403:2053): user pid=1865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171570201.403:2054): user pid=1865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171570201.405:2055): user pid=1866 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171570201.405:2056): user pid=1866 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171570201.423:2057): user pid=1865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171570201.424:2058): user pid=1865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171570501.740:2059): user pid=1903 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171570501.740:2060): login pid=1903 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171570501.742:2061): user pid=1903 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171570501.743:2062): user pid=1903 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171570512.514:2063): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171570512.514:2063): arch=c000003e syscall=2 success=yes exit=11 a0=356be40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171570512.514:2064): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171570512.514:2064): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171570512.514:2064): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171570514.531:2065): avc: denied { search } for pid=1926 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171570514.531:2065): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=1926 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171570514.532:2066): avc: denied { search } for pid=1926 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171570514.532:2066): avc: denied { write } for pid=1926 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171570514.532:2066): avc: denied { add_name } for pid=1926 comm="pyzor" name="EJxALj" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171570514.532:2066): avc: denied { create } for pid=1926 comm="pyzor" name="EJxALj" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171570514.532:2066): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=1926 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171570514.533:2067): avc: denied { getattr } for pid=1926 comm="pyzor" name="EJxALj" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171570514.533:2067): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff9ff54750 a2=7fff9ff54750 a3=2 items=0 ppid=3451 pid=1926 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171570514.533:2067): path="/tmp/EJxALj" >type=AVC msg=audit(1171570514.533:2068): avc: denied { write } for pid=1926 comm="pyzor" name="EJxALj" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171570514.533:2068): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=1926 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171570514.533:2068): path="/tmp/EJxALj" >type=AVC msg=audit(1171570514.533:2069): avc: denied { remove_name } for pid=1926 comm="pyzor" name="EJxALj" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171570514.533:2069): avc: denied { unlink } for pid=1926 comm="pyzor" name="EJxALj" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171570514.533:2069): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=1926 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171570514.537:2070): avc: denied { read } for pid=1926 comm="pyzor" name="tmpyK_E8_" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171570514.537:2070): arch=c000003e syscall=0 success=yes exit=656 a0=4 a1=2aaaaf34d000 a2=1000 a3=54 items=0 ppid=3451 pid=1926 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171570514.537:2070): path=2F746D702F746D70794B5F45385F202864656C6574656429 >type=AVC msg=audit(1171570519.502:2071): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171570519.502:2071): arch=c000003e syscall=86 success=yes exit=0 a0=31cadd0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171570519.502:2072): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171570519.502:2072): arch=c000003e syscall=87 success=yes exit=0 a0=31cadd0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171570801.067:2073): user pid=1987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171570801.067:2074): login pid=1987 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171570801.069:2075): user pid=1988 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171570801.069:2076): login pid=1988 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171570801.071:2077): user pid=1987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171570801.071:2078): user pid=1987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171570801.074:2079): user pid=1988 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171570801.075:2080): user pid=1988 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171570801.090:2081): user pid=1987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171570801.091:2082): user pid=1987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171571101.399:2083): user pid=2023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171571101.400:2084): login pid=2023 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171571101.403:2085): user pid=2023 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171571101.403:2086): user pid=2023 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171571190.834:2087): user pid=2043 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171571190.836:2088): user pid=2043 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171571190.836:2089): login pid=2043 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171571190.837:2090): user pid=2043 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1171571190.846:2091): user pid=2046 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171571190.927:2092): user pid=2043 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1171571401.723:2093): user pid=2120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171571401.724:2094): login pid=2120 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171571401.726:2095): user pid=2121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171571401.726:2096): login pid=2121 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171571401.728:2097): user pid=2120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171571401.728:2098): user pid=2120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171571401.734:2099): user pid=2121 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171571401.734:2100): user pid=2121 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171571401.749:2101): user pid=2120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171571401.750:2102): user pid=2120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171571701.073:2103): user pid=2167 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171571701.073:2104): login pid=2167 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171571701.076:2105): user pid=2167 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171571701.076:2106): user pid=2167 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171571804.665:2107): user pid=2184 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1171571804.665:2108): user pid=2184 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1171571804.670:2109): user pid=2184 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1171571804.670:2110): user pid=2184 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1171572001.395:2111): user pid=2249 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171572001.395:2112): login pid=2249 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171572001.398:2113): user pid=2249 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171572001.398:2114): user pid=2249 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171572001.398:2115): user pid=2250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171572001.398:2116): login pid=2250 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171572001.408:2117): user pid=2250 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171572001.408:2118): user pid=2250 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171572001.417:2119): user pid=2249 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171572001.417:2120): user pid=2249 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171572301.730:2121): user pid=2288 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171572301.730:2122): login pid=2288 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171572301.733:2123): user pid=2288 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171572301.733:2124): user pid=2288 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171572349.108:2125): user pid=2184 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1171572349.108:2126): user pid=2184 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1171572356.157:2127): user pid=2043 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171572356.158:2128): user pid=2043 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171572601.063:2129): user pid=2328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171572601.064:2130): login pid=2328 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171572601.065:2131): user pid=2329 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171572601.065:2132): login pid=2329 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171572601.067:2133): user pid=2328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171572601.067:2134): user pid=2328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171572601.081:2135): user pid=2329 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171572601.081:2136): user pid=2329 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171572601.087:2137): user pid=2328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171572601.087:2138): user pid=2328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171572901.408:2139): user pid=2363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171572901.408:2140): login pid=2363 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171572901.412:2141): user pid=2363 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171572901.412:2142): user pid=2363 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171573201.744:2143): user pid=2396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171573201.744:2144): login pid=2396 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171573201.746:2145): user pid=2397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171573201.746:2146): login pid=2397 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171573201.748:2147): user pid=2396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171573201.748:2148): user pid=2396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171573201.751:2149): user pid=2397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171573201.751:2150): user pid=2397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171573201.767:2151): user pid=2396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171573201.767:2152): user pid=2396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171573261.079:2153): user pid=2412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171573261.080:2154): login pid=2412 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171573261.084:2155): user pid=2412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171573261.084:2156): user pid=2412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171573261.984:2157): user pid=2412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171573261.984:2158): user pid=2412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171573501.993:2159): user pid=2452 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171573501.993:2160): login pid=2452 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171573501.997:2161): user pid=2452 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171573501.997:2162): user pid=2452 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171573801.331:2163): user pid=2486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171573801.331:2164): login pid=2486 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171573801.333:2165): user pid=2487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171573801.333:2166): login pid=2487 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171573801.338:2167): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171573801.338:2168): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171573801.342:2169): user pid=2487 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171573801.342:2170): user pid=2487 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171573801.356:2171): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171573801.356:2172): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171573886.566:2173): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171573886.566:2173): arch=c000003e syscall=2 success=yes exit=11 a0=3348410 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171573886.566:2174): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171573886.566:2174): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171573886.566:2174): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171573886.573:2175): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171573886.573:2175): arch=c000003e syscall=2 success=yes exit=8 a0=308a800 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171573886.575:2176): avc: denied { ioctl } for pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171573886.575:2176): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171573886.575:2176): path="/home/dhighley/.razor/server.c123.cloudmark.com.conf" >type=AVC msg=audit(1171573887.438:2177): avc: denied { search } for pid=2513 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171573887.438:2177): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171573887.438:2178): avc: denied { getattr } for pid=2513 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171573887.438:2178): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffd02dbec0 a2=7fffd02dbec0 a3=6c6280 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171573887.438:2178): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171573887.438:2179): avc: denied { read } for pid=2513 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171573887.438:2179): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171573887.439:2180): avc: denied { search } for pid=2513 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171573887.439:2180): avc: denied { write } for pid=2513 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171573887.439:2180): avc: denied { add_name } for pid=2513 comm="pyzor" name="UIJ64n" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171573887.439:2180): avc: denied { create } for pid=2513 comm="pyzor" name="UIJ64n" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171573887.439:2180): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171573887.439:2181): avc: denied { getattr } for pid=2513 comm="pyzor" name="UIJ64n" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171573887.439:2181): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd02da3b0 a2=7fffd02da3b0 a3=3 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171573887.439:2181): path="/tmp/UIJ64n" >type=AVC msg=audit(1171573887.440:2182): avc: denied { write } for pid=2513 comm="pyzor" name="UIJ64n" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171573887.440:2182): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15864 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171573887.440:2182): path="/tmp/UIJ64n" >type=AVC msg=audit(1171573887.440:2183): avc: denied { remove_name } for pid=2513 comm="pyzor" name="UIJ64n" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171573887.440:2183): avc: denied { unlink } for pid=2513 comm="pyzor" name="UIJ64n" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171573887.440:2183): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171573887.441:2184): avc: denied { read } for pid=2513 comm="pyzor" name="tmpAUoxnS" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171573887.441:2184): arch=c000003e syscall=0 success=yes exit=680 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171573887.441:2184): path=2F746D702F746D7041556F786E53202864656C6574656429 >type=AVC msg=audit(1171573892.400:2185): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171573892.400:2185): arch=c000003e syscall=62 success=yes exit=0 a0=9d1 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171573892.409:2186): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171573892.409:2186): arch=c000003e syscall=86 success=yes exit=0 a0=339a3a0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171573892.409:2187): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171573892.409:2187): arch=c000003e syscall=87 success=yes exit=0 a0=339a3a0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171573892.410:2188): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171573892.410:2188): arch=c000003e syscall=2 success=yes exit=8 a0=33ec8b0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171573892.420:2189): avc: denied { write } for pid=2509 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171573892.420:2189): avc: denied { add_name } for pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171573892.420:2189): avc: denied { create } for pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171573892.420:2189): arch=c000003e syscall=2 success=yes exit=6 a0=61d7a0 a1=c1 a2=124 a3=61d7a0 items=0 ppid=2506 pid=2509 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171573892.420:2190): avc: denied { write } for pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171573892.420:2190): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61d7a0 items=0 ppid=2506 pid=2509 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171573892.420:2190): path="/home/dhighley/_Nn.EyM1FB.douglas" >type=AVC msg=audit(1171573892.421:2191): avc: denied { getattr } for pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171573892.421:2191): arch=c000003e syscall=4 success=yes exit=0 a0=61d7a0 a1=7fffe2e81870 a2=7fffe2e81870 a3=61d7a0 items=0 ppid=2506 pid=2509 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171573892.421:2191): path="/home/dhighley/_Nn.EyM1FB.douglas" >type=AVC msg=audit(1171573892.421:2192): avc: denied { link } for pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171573892.421:2192): arch=c000003e syscall=86 success=yes exit=0 a0=61d7a0 a1=61b520 a2=7fffe2e81790 a3=61d7a0 items=0 ppid=2506 pid=2509 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171573892.421:2193): avc: denied { remove_name } for pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171573892.421:2193): avc: denied { unlink } for pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171573892.421:2193): arch=c000003e syscall=87 success=yes exit=0 a0=61d7a0 a1=61b520 a2=7fffe2e81790 a3=61d7a0 items=0 ppid=2506 pid=2509 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171573892.421:2194): avc: denied { append } for pid=2509 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171573892.421:2194): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=2506 pid=2509 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171574101.674:2195): user pid=2532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171574101.674:2196): login pid=2532 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171574101.678:2197): user pid=2532 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171574101.678:2198): user pid=2532 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171574402.001:2199): user pid=2572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171574402.002:2200): login pid=2572 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171574402.004:2201): user pid=2573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171574402.004:2202): login pid=2573 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171574402.006:2203): user pid=2572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171574402.006:2204): user pid=2572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171574402.014:2205): user pid=2573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171574402.014:2206): user pid=2573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171574402.023:2207): user pid=2572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171574402.024:2208): user pid=2572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171574573.085:2209): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171574573.085:2209): arch=c000003e syscall=2 success=yes exit=8 a0=32639e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171574573.088:2210): avc: denied { ioctl } for pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171574573.088:2210): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171574573.088:2210): path="/home/dhighley/.razor/server.c123.cloudmark.com.conf" >type=AVC msg=audit(1171574573.946:2211): avc: denied { getattr } for pid=2608 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171574573.946:2211): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff21870770 a2=7fff21870770 a3=6c6280 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171574573.946:2211): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171574573.946:2212): avc: denied { read } for pid=2608 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171574573.946:2212): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171574573.947:2213): avc: denied { search } for pid=2608 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171574573.947:2213): avc: denied { write } for pid=2608 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171574573.947:2213): avc: denied { add_name } for pid=2608 comm="pyzor" name="Q7kiAe" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171574573.947:2213): avc: denied { create } for pid=2608 comm="pyzor" name="Q7kiAe" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171574573.947:2213): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171574573.948:2214): avc: denied { getattr } for pid=2608 comm="pyzor" name="Q7kiAe" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171574573.948:2214): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff2186f070 a2=7fff2186f070 a3=2 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171574573.948:2214): path="/tmp/Q7kiAe" >type=AVC msg=audit(1171574573.948:2215): avc: denied { write } for pid=2608 comm="pyzor" name="Q7kiAe" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171574573.948:2215): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cf864 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171574573.948:2215): path="/tmp/Q7kiAe" >type=AVC msg=audit(1171574573.948:2216): avc: denied { remove_name } for pid=2608 comm="pyzor" name="Q7kiAe" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171574573.948:2216): avc: denied { unlink } for pid=2608 comm="pyzor" name="Q7kiAe" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171574573.948:2216): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171574573.954:2217): avc: denied { read } for pid=2608 comm="pyzor" name="tmprhD28x" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171574573.954:2217): arch=c000003e syscall=0 success=yes exit=373 a0=4 a1=2aaaaf34d000 a2=1000 a3=13 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171574573.954:2217): path=2F746D702F746D70726844323878202864656C6574656429 >type=AVC msg=audit(1171574578.961:2218): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171574578.961:2218): arch=c000003e syscall=2 success=yes exit=8 a0=335ef10 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171574701.340:2219): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171574701.340:2220): login pid=2619 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171574701.343:2221): user pid=2619 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171574701.343:2222): user pid=2619 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171575001.665:2223): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171575001.665:2224): login pid=2653 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171575001.667:2225): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171575001.667:2226): login pid=2654 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171575001.669:2227): user pid=2653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171575001.669:2228): user pid=2653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171575001.674:2229): user pid=2654 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171575001.675:2230): user pid=2654 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171575001.692:2231): user pid=2653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171575001.692:2232): user pid=2653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171575302.002:2233): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171575302.002:2234): login pid=2734 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171575302.007:2235): user pid=2734 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171575302.007:2236): user pid=2734 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171575393.841:2237): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171575393.841:2237): arch=c000003e syscall=2 success=yes exit=11 a0=338aa20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171575393.841:2238): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171575393.841:2238): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171575393.841:2238): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171575394.349:2239): avc: denied { search } for pid=2763 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171575394.349:2239): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=2763 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171575399.325:2240): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171575399.325:2240): arch=c000003e syscall=86 success=yes exit=0 a0=30af360 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171575399.325:2241): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171575399.325:2241): arch=c000003e syscall=87 success=yes exit=0 a0=30af360 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171575399.336:2242): avc: denied { append } for pid=2758 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171575399.336:2242): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=2755 pid=2758 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171575601.329:2243): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171575601.329:2244): login pid=2782 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171575601.331:2245): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171575601.331:2246): login pid=2783 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171575601.333:2247): user pid=2782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171575601.333:2248): user pid=2782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171575601.338:2249): user pid=2783 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171575601.338:2250): user pid=2783 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171575601.355:2251): user pid=2782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171575601.355:2252): user pid=2782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171575901.668:2253): user pid=2823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171575901.668:2254): login pid=2823 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171575901.673:2255): user pid=2823 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171575901.673:2256): user pid=2823 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171576201.993:2257): user pid=2864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171576201.993:2258): login pid=2864 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171576201.996:2259): user pid=2865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171576201.996:2260): login pid=2865 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171576201.999:2261): user pid=2864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171576201.999:2262): user pid=2864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171576202.002:2263): user pid=2865 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171576202.002:2264): user pid=2865 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171576202.020:2265): user pid=2864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171576202.020:2266): user pid=2864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171576501.336:2267): user pid=2903 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171576501.337:2268): login pid=2903 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171576501.341:2269): user pid=2903 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171576501.341:2270): user pid=2903 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171576801.666:2271): user pid=2938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171576801.666:2272): login pid=2938 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171576801.668:2273): user pid=2939 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171576801.668:2274): login pid=2939 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171576801.670:2275): user pid=2938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171576801.670:2276): user pid=2938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171576801.678:2277): user pid=2939 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171576801.679:2278): user pid=2939 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171576801.687:2279): user pid=2938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171576801.687:2280): user pid=2938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171576861.006:2281): user pid=2966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171576861.006:2282): login pid=2966 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171576861.010:2283): user pid=2966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171576861.010:2284): user pid=2966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171576861.895:2285): user pid=2966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171576861.896:2286): user pid=2966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171577101.904:2287): user pid=3006 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171577101.904:2288): login pid=3006 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171577101.907:2289): user pid=3006 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171577101.907:2290): user pid=3006 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171577384.055:2291): avc: denied { write } for pid=3045 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171577384.055:2291): avc: denied { add_name } for pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171577384.055:2291): avc: denied { create } for pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171577384.055:2291): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=3037 pid=3045 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171577384.055:2292): avc: denied { write } for pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171577384.055:2292): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=3037 pid=3045 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171577384.055:2292): path="/home/dhighley/_lv.ooN1FB.douglas" >type=AVC msg=audit(1171577384.056:2293): avc: denied { getattr } for pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171577384.056:2293): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fffa7fb09a0 a2=7fffa7fb09a0 a3=61b650 items=0 ppid=3037 pid=3045 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171577384.056:2293): path="/home/dhighley/_lv.ooN1FB.douglas" >type=AVC msg=audit(1171577384.056:2294): avc: denied { link } for pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171577384.056:2294): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=621110 a2=7fffa7fb08c0 a3=61b650 items=0 ppid=3037 pid=3045 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171577384.056:2295): avc: denied { remove_name } for pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171577384.056:2295): avc: denied { unlink } for pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171577384.056:2295): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=621110 a2=7fffa7fb08c0 a3=61b650 items=0 ppid=3037 pid=3045 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171577401.231:2296): user pid=3054 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171577401.231:2297): login pid=3054 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171577401.233:2298): user pid=3055 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171577401.233:2299): login pid=3055 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171577401.234:2300): user pid=3054 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171577401.234:2301): user pid=3054 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171577401.240:2302): user pid=3055 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171577401.240:2303): user pid=3055 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171577401.254:2304): user pid=3054 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171577401.254:2305): user pid=3054 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171577656.205:2306): user pid=1764 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171577656.206:2307): user pid=1764 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171577701.210:2308): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171577701.210:2309): login pid=3103 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171577701.214:2310): user pid=3103 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171577701.214:2311): user pid=3103 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171577929.683:2312): user pid=3139 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171577929.684:2313): user pid=3139 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171577929.685:2314): login pid=3139 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171577929.685:2315): user pid=3139 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1171577929.695:2316): user pid=3142 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171577929.774:2317): user pid=3139 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=CRED_DISP msg=audit(1171577951.291:2318): user pid=3139 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171577951.291:2319): user pid=3139 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171578001.541:2320): user pid=3194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171578001.541:2321): login pid=3194 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171578001.543:2322): user pid=3195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171578001.544:2323): login pid=3195 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171578001.544:2324): user pid=3194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171578001.545:2325): user pid=3194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171578001.548:2326): user pid=3195 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171578001.548:2327): user pid=3195 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171578001.569:2328): user pid=3194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171578001.569:2329): user pid=3194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171578158.979:2330): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=12484628 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578158.979:2330): arch=c000003e syscall=16 success=no exit=-25 a0=a a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171578158.979:2330): path="/home/phighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171578158.979:2331): avc: denied { link } for pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=12484628 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578158.979:2331): arch=c000003e syscall=86 success=yes exit=0 a0=33fc260 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171578158.980:2332): avc: denied { unlink } for pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=12484628 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578158.980:2332): arch=c000003e syscall=87 success=yes exit=0 a0=33fc260 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171578158.980:2333): avc: denied { write } for pid=3451 comm="spamd" name="bayes_toks" dev=dm-0 ino=12485684 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171578158.980:2333): arch=c000003e syscall=2 success=yes exit=10 a0=321bee0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171578158.982:2334): avc: denied { setattr } for pid=3451 comm="spamd" name="bayes.lock" dev=dm-0 ino=12484628 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578158.982:2334): arch=c000003e syscall=132 success=yes exit=0 a0=3095f40 a1=7fffbe9f5460 a2=37a0b12b60 a3=1f32858 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171578158.982:2335): avc: denied { rename } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=12485716 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578158.982:2335): arch=c000003e syscall=82 success=yes exit=0 a0=33590e0 a1=31ab9e0 a2=37a0b1227e a3=8 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171578158.982:2336): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal.old" dev=dm-0 ino=12485716 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578158.982:2336): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171578158.982:2336): path="/home/phighley/.spamassassin/bayes_journal.old" >type=AVC msg=audit(1171578159.170:2337): avc: denied { unlink } for pid=3451 comm="spamd" name="bayes_journal.old" dev=dm-0 ino=12485716 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578159.170:2337): arch=c000003e syscall=87 success=yes exit=0 a0=31ab9e0 a1=1de95d0 a2=37a0b12b60 a3=321c770 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171578159.437:2338): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=12484632 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578159.437:2338): arch=c000003e syscall=1 success=yes exit=1680 a0=8 a1=30ba590 a2=690 a3=11 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171578159.437:2338): path="/home/phighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171578159.444:2339): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=12487199 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171578159.444:2339): arch=c000003e syscall=2 success=yes exit=8 a0=3401d50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171578160.230:2340): avc: denied { search } for pid=3232 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171578160.230:2340): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171578160.231:2341): avc: denied { getattr } for pid=3232 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578160.231:2341): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff2956f470 a2=7fff2956f470 a3=6c6280 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171578160.231:2341): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171578160.231:2342): avc: denied { read } for pid=3232 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578160.231:2342): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171578160.231:2343): avc: denied { search } for pid=3232 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171578160.231:2343): avc: denied { write } for pid=3232 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171578160.231:2343): avc: denied { add_name } for pid=3232 comm="pyzor" name="55VF_F" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171578160.231:2343): avc: denied { create } for pid=3232 comm="pyzor" name="55VF_F" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171578160.231:2343): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171578160.232:2344): avc: denied { getattr } for pid=3232 comm="pyzor" name="55VF_F" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171578160.232:2344): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff2956dd70 a2=7fff2956dd70 a3=2 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171578160.232:2344): path="/tmp/55VF_F" >type=AVC msg=audit(1171578160.232:2345): avc: denied { write } for pid=3232 comm="pyzor" name="55VF_F" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171578160.232:2345): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cff84 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171578160.232:2345): path="/tmp/55VF_F" >type=AVC msg=audit(1171578160.232:2346): avc: denied { remove_name } for pid=3232 comm="pyzor" name="55VF_F" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171578160.232:2346): avc: denied { unlink } for pid=3232 comm="pyzor" name="55VF_F" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171578160.232:2346): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171578160.236:2347): avc: denied { read } for pid=3232 comm="pyzor" name="tmpSjEGnp" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171578160.236:2347): arch=c000003e syscall=0 success=yes exit=232 a0=4 a1=2aaaaf34d000 a2=1000 a3=27 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171578160.236:2347): path=2F746D702F746D70536A45476E70202864656C6574656429 >type=AVC msg=audit(1171578165.193:2348): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171578165.193:2348): arch=c000003e syscall=62 success=yes exit=0 a0=ca0 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171578165.341:2349): avc: denied { write } for pid=3228 comm="procmail" name="phighley" dev=dm-0 ino=12485733 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171578165.341:2349): avc: denied { add_name } for pid=3228 comm="procmail" name="_cy.10N1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171578165.341:2349): avc: denied { create } for pid=3228 comm="procmail" name="_cy.10N1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578165.341:2349): arch=c000003e syscall=2 success=yes exit=6 a0=61b420 a1=c1 a2=124 a3=61b420 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171578165.342:2350): avc: denied { write } for pid=3228 comm="procmail" name="_cy.10N1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578165.342:2350): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b420 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171578165.342:2350): path="/home/phighley/_cy.10N1FB.douglas" >type=AVC msg=audit(1171578165.342:2351): avc: denied { getattr } for pid=3228 comm="procmail" name="_cy.10N1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578165.342:2351): arch=c000003e syscall=4 success=yes exit=0 a0=61b420 a1=7ffff51c9bc0 a2=7ffff51c9bc0 a3=61b420 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171578165.342:2351): path="/home/phighley/_cy.10N1FB.douglas" >type=AVC msg=audit(1171578165.342:2352): avc: denied { link } for pid=3228 comm="procmail" name="_cy.10N1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578165.342:2352): arch=c000003e syscall=86 success=yes exit=0 a0=61b420 a1=61d010 a2=7ffff51c9ae0 a3=61b420 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171578165.342:2353): avc: denied { remove_name } for pid=3228 comm="procmail" name="_cy.10N1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171578165.342:2353): avc: denied { unlink } for pid=3228 comm="procmail" name="_cy.10N1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578165.342:2353): arch=c000003e syscall=87 success=yes exit=0 a0=61b420 a1=61d010 a2=7ffff51c9ae0 a3=61b420 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171578165.343:2354): avc: denied { getattr } for pid=3228 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578165.343:2354): arch=c000003e syscall=4 success=yes exit=0 a0=619450 a1=7ffff51c9bb0 a2=7ffff51c9bb0 a3=619453 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171578165.343:2354): path="/home/phighley/spamlog" >type=AVC msg=audit(1171578165.343:2355): avc: denied { append } for pid=3228 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578165.343:2355): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=3 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171578165.343:2356): avc: denied { lock } for pid=3228 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171578165.343:2356): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171578165.343:2356): path="/home/phighley/spamlog" >type=USER_ACCT msg=audit(1171578301.885:2357): user pid=3247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171578301.885:2358): login pid=3247 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171578301.889:2359): user pid=3247 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171578301.889:2360): user pid=3247 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171578601.213:2361): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171578601.213:2362): login pid=3287 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171578601.215:2363): user pid=3290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171578601.215:2364): login pid=3290 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171578601.216:2365): user pid=3287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171578601.217:2366): user pid=3287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171578601.228:2367): user pid=3290 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171578601.228:2368): user pid=3290 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171578601.238:2369): user pid=3287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171578601.238:2370): user pid=3287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171578901.568:2371): user pid=3334 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171578901.569:2372): login pid=3334 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171578901.573:2373): user pid=3334 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171578901.573:2374): user pid=3334 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171579201.896:2375): user pid=3373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171579201.896:2376): login pid=3373 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171579201.898:2377): user pid=3374 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171579201.898:2378): login pid=3374 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171579201.900:2379): user pid=3373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171579201.900:2380): user pid=3373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171579201.905:2381): user pid=3374 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171579201.905:2382): user pid=3374 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171579201.931:2383): user pid=3373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171579201.931:2384): user pid=3373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171579501.232:2385): user pid=3420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171579501.232:2386): login pid=3420 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171579501.235:2387): user pid=3420 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171579501.235:2388): user pid=3420 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171579801.560:2389): user pid=3476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171579801.560:2390): login pid=3476 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171579801.562:2391): user pid=3477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171579801.563:2392): login pid=3477 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171579801.563:2393): user pid=3476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171579801.563:2394): user pid=3476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171579801.568:2395): user pid=3477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171579801.569:2396): user pid=3477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171579801.587:2397): user pid=3476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171579801.587:2398): user pid=3476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171579959.320:2399): user pid=3510 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1171579959.322:2400): user pid=3510 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=LOGIN msg=audit(1171579959.322:2401): login pid=3510 uid=0 old auid=4294967295 new auid=1000 >type=USER_START msg=audit(1171579959.323:2402): user pid=3510 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1171579959.332:2403): user pid=3513 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1171579959.413:2404): user pid=3510 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)' >type=CRED_DISP msg=audit(1171579965.010:2405): user pid=3510 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_END msg=audit(1171579965.011:2406): user pid=3510 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1171580101.901:2407): user pid=3562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171580101.902:2408): login pid=3562 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171580101.905:2409): user pid=3562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171580101.905:2410): user pid=3562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171580125.962:2411): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171580125.962:2411): arch=c000003e syscall=2 success=yes exit=11 a0=33ef020 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171580125.962:2412): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171580125.962:2412): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171580125.962:2412): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171580125.969:2413): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171580125.969:2413): arch=c000003e syscall=2 success=yes exit=8 a0=3084a00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171580125.971:2414): avc: denied { ioctl } for pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171580125.971:2414): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171580125.971:2414): path="/home/dhighley/.razor/server.c123.cloudmark.com.conf" >type=AVC msg=audit(1171580126.580:2415): avc: denied { search } for pid=3581 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171580126.580:2415): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171580126.580:2416): avc: denied { getattr } for pid=3581 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171580126.580:2416): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff041adc50 a2=7fff041adc50 a3=6c6280 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171580126.580:2416): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171580126.580:2417): avc: denied { read } for pid=3581 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171580126.580:2417): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171580126.581:2418): avc: denied { search } for pid=3581 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171580126.581:2418): avc: denied { write } for pid=3581 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171580126.581:2418): avc: denied { add_name } for pid=3581 comm="pyzor" name="b5l6_m" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171580126.581:2418): avc: denied { create } for pid=3581 comm="pyzor" name="b5l6_m" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171580126.581:2418): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171580126.582:2419): avc: denied { getattr } for pid=3581 comm="pyzor" name="b5l6_m" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171580126.582:2419): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff041ac550 a2=7fff041ac550 a3=2 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171580126.582:2419): path="/tmp/b5l6_m" >type=AVC msg=audit(1171580126.582:2420): avc: denied { write } for pid=3581 comm="pyzor" name="b5l6_m" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171580126.582:2420): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cf864 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171580126.582:2420): path="/tmp/b5l6_m" >type=AVC msg=audit(1171580126.582:2421): avc: denied { remove_name } for pid=3581 comm="pyzor" name="b5l6_m" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171580126.582:2421): avc: denied { unlink } for pid=3581 comm="pyzor" name="b5l6_m" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171580126.582:2421): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171580126.587:2422): avc: denied { read } for pid=3581 comm="pyzor" name="tmpfTvvt1" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171580126.587:2422): arch=c000003e syscall=0 success=yes exit=1299 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171580126.587:2422): path=2F746D702F746D70665476767431202864656C6574656429 >type=AVC msg=audit(1171580131.544:2423): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171580131.544:2423): arch=c000003e syscall=62 success=yes exit=0 a0=dfd a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171580131.658:2424): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171580131.658:2424): arch=c000003e syscall=86 success=yes exit=0 a0=30f05f0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171580131.659:2425): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171580131.659:2425): arch=c000003e syscall=87 success=yes exit=0 a0=30f05f0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171580131.660:2426): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171580131.660:2426): arch=c000003e syscall=2 success=yes exit=8 a0=60c920 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171580131.730:2427): avc: denied { write } for pid=3577 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171580131.730:2427): avc: denied { add_name } for pid=3577 comm="procmail" name="_53.jTO1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171580131.730:2427): arch=c000003e syscall=2 success=yes exit=6 a0=61b610 a1=c1 a2=124 a3=61b610 items=0 ppid=3574 pid=3577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171580131.731:2428): avc: denied { remove_name } for pid=3577 comm="procmail" name="_53.jTO1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171580131.731:2428): arch=c000003e syscall=87 success=yes exit=0 a0=61b610 a1=61cec0 a2=7fff68592860 a3=61b610 items=0 ppid=3574 pid=3577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171580131.731:2429): avc: denied { append } for pid=3577 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171580131.731:2429): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=3574 pid=3577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171580401.228:2430): user pid=3612 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171580401.229:2431): login pid=3612 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171580401.231:2432): user pid=3613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171580401.231:2433): login pid=3613 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171580401.232:2434): user pid=3612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171580401.232:2435): user pid=3612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171580401.233:2436): user pid=3614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171580401.233:2437): login pid=3614 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171580401.241:2438): user pid=3613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171580401.241:2439): user pid=3613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171580401.249:2440): user pid=3614 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171580401.249:2441): user pid=3614 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171580401.258:2442): user pid=3612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171580401.258:2443): user pid=3612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171580461.565:2444): user pid=3633 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171580461.566:2445): login pid=3633 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171580461.568:2446): user pid=3633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171580461.569:2447): user pid=3633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171580462.451:2448): user pid=3633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171580462.452:2449): user pid=3633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171580701.459:2450): user pid=3674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171580701.459:2451): login pid=3674 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171580701.462:2452): user pid=3674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171580701.463:2453): user pid=3674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171581001.782:2454): user pid=3711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171581001.782:2455): login pid=3711 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171581001.784:2456): user pid=3712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171581001.784:2457): login pid=3712 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171581001.785:2458): user pid=3711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171581001.785:2459): user pid=3711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171581001.789:2460): user pid=3712 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171581001.789:2461): user pid=3712 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171581001.803:2462): user pid=3711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171581001.803:2463): user pid=3711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171581039.066:2464): avc: denied { getattr } for pid=3734 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171581039.066:2464): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff62887780 a2=7fff62887780 a3=6c6280 items=0 ppid=3451 pid=3734 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171581039.066:2464): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171581039.066:2465): avc: denied { read } for pid=3734 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171581039.066:2465): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=3734 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171581044.029:2466): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171581044.029:2466): arch=c000003e syscall=62 success=yes exit=0 a0=e96 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171581044.237:2467): avc: denied { create } for pid=3730 comm="procmail" name="_S6.0hO1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171581044.237:2467): arch=c000003e syscall=2 success=yes exit=6 a0=61c930 a1=c1 a2=124 a3=61c930 items=0 ppid=3727 pid=3730 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171581044.238:2468): avc: denied { write } for pid=3730 comm="procmail" name="_S6.0hO1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171581044.238:2468): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c930 items=0 ppid=3727 pid=3730 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171581044.238:2468): path="/home/dhighley/_S6.0hO1FB.douglas" >type=AVC msg=audit(1171581044.238:2469): avc: denied { getattr } for pid=3730 comm="procmail" name="_S6.0hO1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171581044.238:2469): arch=c000003e syscall=4 success=yes exit=0 a0=61c930 a1=7fff6241ae20 a2=7fff6241ae20 a3=61c930 items=0 ppid=3727 pid=3730 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171581044.238:2469): path="/home/dhighley/_S6.0hO1FB.douglas" >type=AVC msg=audit(1171581044.238:2470): avc: denied { link } for pid=3730 comm="procmail" name="_S6.0hO1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171581044.238:2470): arch=c000003e syscall=86 success=yes exit=0 a0=61c930 a1=61b510 a2=7fff6241ad40 a3=61c930 items=0 ppid=3727 pid=3730 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171581044.238:2471): avc: denied { unlink } for pid=3730 comm="procmail" name="_S6.0hO1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171581044.238:2471): arch=c000003e syscall=87 success=yes exit=0 a0=61c930 a1=61b510 a2=7fff6241ad40 a3=61c930 items=0 ppid=3727 pid=3730 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171581301.119:2472): user pid=3755 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171581301.119:2473): login pid=3755 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171581301.123:2474): user pid=3755 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171581301.123:2475): user pid=3755 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171581601.445:2476): user pid=3789 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171581601.445:2477): login pid=3789 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171581601.447:2478): user pid=3790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171581601.447:2479): login pid=3790 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171581601.449:2480): user pid=3789 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171581601.449:2481): user pid=3789 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171581601.454:2482): user pid=3790 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171581601.454:2483): user pid=3790 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171581601.471:2484): user pid=3789 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171581601.472:2485): user pid=3789 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171581901.791:2486): user pid=3827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171581901.791:2487): login pid=3827 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171581901.796:2488): user pid=3827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171581901.796:2489): user pid=3827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171582201.116:2490): user pid=3860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171582201.116:2491): login pid=3860 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171582201.118:2492): user pid=3861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171582201.118:2493): login pid=3861 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171582201.124:2494): user pid=3860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171582201.124:2495): user pid=3860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171582201.128:2496): user pid=3861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171582201.128:2497): user pid=3861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171582201.154:2498): user pid=3860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171582201.154:2499): user pid=3860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171582501.453:2500): user pid=3897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171582501.453:2501): login pid=3897 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171582501.457:2502): user pid=3897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171582501.457:2503): user pid=3897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171582801.781:2504): user pid=3931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171582801.781:2505): user pid=3930 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171582801.781:2506): login pid=3931 uid=0 old auid=4294967295 new auid=111 >type=LOGIN msg=audit(1171582801.781:2507): login pid=3930 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171582801.787:2508): user pid=3931 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171582801.787:2509): user pid=3931 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171582801.792:2510): user pid=3930 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171582801.792:2511): user pid=3930 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171582801.814:2512): user pid=3930 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171582801.814:2513): user pid=3930 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171583101.112:2514): user pid=3966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171583101.112:2515): login pid=3966 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171583101.115:2516): user pid=3966 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171583101.115:2517): user pid=3966 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171583401.449:2518): user pid=4000 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171583401.450:2519): login pid=4000 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171583401.452:2520): user pid=4001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171583401.452:2521): login pid=4001 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171583401.454:2522): user pid=4000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171583401.454:2523): user pid=4000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171583401.463:2524): user pid=4001 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171583401.463:2525): user pid=4001 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171583401.472:2526): user pid=4000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171583401.473:2527): user pid=4000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171583701.780:2528): user pid=4035 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171583701.780:2529): login pid=4035 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171583701.783:2530): user pid=4035 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171583701.783:2531): user pid=4035 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171584001.104:2532): user pid=4069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171584001.104:2533): login pid=4069 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171584001.106:2534): user pid=4070 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171584001.107:2535): login pid=4070 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171584001.108:2536): user pid=4069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171584001.108:2537): user pid=4069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171584001.114:2538): user pid=4070 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171584001.114:2539): user pid=4070 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171584001.127:2540): user pid=4069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171584001.127:2541): user pid=4069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171584061.434:2542): user pid=4085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171584061.434:2543): login pid=4085 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171584061.437:2544): user pid=4085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171584061.437:2545): user pid=4085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171584062.331:2546): user pid=4085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171584062.332:2547): user pid=4085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171584301.337:2548): user pid=4128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171584301.337:2549): login pid=4128 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171584301.340:2550): user pid=4128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171584301.340:2551): user pid=4128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171584598.338:2552): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=12484632 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171584598.338:2552): arch=c000003e syscall=2 success=yes exit=11 a0=33ced10 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171584598.338:2553): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=12484632 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171584598.338:2553): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=2 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171584598.338:2553): path="/home/phighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171584598.344:2554): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=12487199 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171584598.344:2554): arch=c000003e syscall=2 success=yes exit=8 a0=3098560 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171584598.347:2555): avc: denied { ioctl } for pid=3451 comm="spamd" name="server.c122.cloudmark.com.conf" dev=dm-0 ino=12487167 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171584598.347:2555): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171584598.347:2555): path="/home/phighley/.razor/server.c122.cloudmark.com.conf" >type=AVC msg=audit(1171584599.747:2556): avc: denied { getattr } for pid=4172 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171584599.747:2556): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffdf5b34b0 a2=7fffdf5b34b0 a3=6c6280 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171584599.747:2556): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171584599.747:2557): avc: denied { read } for pid=4172 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171584599.747:2557): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171584599.748:2558): avc: denied { search } for pid=4172 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171584599.748:2558): avc: denied { write } for pid=4172 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171584599.748:2558): avc: denied { add_name } for pid=4172 comm="pyzor" name="8g73qk" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171584599.748:2558): avc: denied { create } for pid=4172 comm="pyzor" name="8g73qk" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171584599.748:2558): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171584599.749:2559): avc: denied { getattr } for pid=4172 comm="pyzor" name="8g73qk" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171584599.749:2559): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffdf5b1db0 a2=7fffdf5b1db0 a3=2 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171584599.749:2559): path="/tmp/8g73qk" >type=AVC msg=audit(1171584599.749:2560): avc: denied { write } for pid=4172 comm="pyzor" name="8g73qk" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171584599.749:2560): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171584599.749:2560): path="/tmp/8g73qk" >type=AVC msg=audit(1171584599.749:2561): avc: denied { remove_name } for pid=4172 comm="pyzor" name="8g73qk" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171584599.749:2561): avc: denied { unlink } for pid=4172 comm="pyzor" name="8g73qk" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171584599.749:2561): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171584599.751:2562): avc: denied { read } for pid=4172 comm="pyzor" name="tmpPkhJHw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171584599.751:2562): arch=c000003e syscall=0 success=yes exit=602 a0=4 a1=2aaaaf34d000 a2=1000 a3=67 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171584599.751:2562): path=2F746D702F746D70506B684A4877202864656C6574656429 >type=USER_ACCT msg=audit(1171584601.663:2563): user pid=4173 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171584601.663:2564): login pid=4173 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171584601.666:2565): user pid=4174 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171584601.666:2566): login pid=4174 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171584601.669:2567): user pid=4173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171584601.669:2568): user pid=4173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171584601.671:2569): user pid=4174 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171584601.671:2570): user pid=4174 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171584601.690:2571): user pid=4173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171584601.690:2572): user pid=4173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171584604.949:2573): avc: denied { link } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=12484628 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171584604.949:2573): arch=c000003e syscall=86 success=yes exit=0 a0=33c9600 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171584604.949:2574): avc: denied { unlink } for pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=12484628 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171584604.949:2574): arch=c000003e syscall=87 success=yes exit=0 a0=33c9600 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171584604.950:2575): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=12487184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171584604.950:2575): arch=c000003e syscall=2 success=yes exit=8 a0=309b860 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171584604.974:2576): avc: denied { getattr } for pid=4168 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171584604.974:2576): arch=c000003e syscall=4 success=yes exit=0 a0=619450 a1=7fff8c647020 a2=7fff8c647020 a3=619453 items=0 ppid=4163 pid=4168 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171584604.974:2576): path="/home/phighley/spamlog" >type=AVC msg=audit(1171584604.974:2577): avc: denied { append } for pid=4168 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171584604.974:2577): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=4163 pid=4168 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171584604.974:2578): avc: denied { lock } for pid=4168 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171584604.974:2578): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=4163 pid=4168 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171584604.974:2578): path="/home/phighley/spamlog" >type=USER_ACCT msg=audit(1171584901.010:2579): user pid=4215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171584901.011:2580): login pid=4215 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171584901.014:2581): user pid=4215 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171584901.014:2582): user pid=4215 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171584950.362:2583): avc: denied { search } for pid=4238 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171584950.362:2583): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4238 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171584950.592:2584): avc: denied { write } for pid=4234 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171584950.592:2584): avc: denied { add_name } for pid=4234 comm="procmail" name="_KCB.2eP1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171584950.592:2584): arch=c000003e syscall=2 success=yes exit=6 a0=61c5a0 a1=c1 a2=124 a3=61c5a0 items=0 ppid=4231 pid=4234 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171584950.593:2585): avc: denied { remove_name } for pid=4234 comm="procmail" name="_KCB.2eP1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171584950.593:2585): arch=c000003e syscall=87 success=yes exit=0 a0=61c5a0 a1=61b520 a2=7fffb87cc0e0 a3=61c5a0 items=0 ppid=4231 pid=4234 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171584950.593:2586): avc: denied { append } for pid=4234 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171584950.593:2586): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=4231 pid=4234 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171585145.432:2587): avc: denied { create } for pid=4260 comm="procmail" name="_kCB.5hP1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171585145.432:2587): arch=c000003e syscall=2 success=yes exit=6 a0=61b5c0 a1=c1 a2=124 a3=61b5c0 items=0 ppid=4257 pid=4260 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171585145.432:2588): avc: denied { write } for pid=4260 comm="procmail" name="_kCB.5hP1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171585145.432:2588): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b5c0 items=0 ppid=4257 pid=4260 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171585145.432:2588): path="/home/dhighley/_kCB.5hP1FB.douglas" >type=AVC msg=audit(1171585145.432:2589): avc: denied { getattr } for pid=4260 comm="procmail" name="_kCB.5hP1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171585145.432:2589): arch=c000003e syscall=4 success=yes exit=0 a0=61b5c0 a1=7fff2c90c300 a2=7fff2c90c300 a3=61b5c0 items=0 ppid=4257 pid=4260 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171585145.432:2589): path="/home/dhighley/_kCB.5hP1FB.douglas" >type=AVC msg=audit(1171585145.432:2590): avc: denied { link } for pid=4260 comm="procmail" name="_kCB.5hP1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171585145.432:2590): arch=c000003e syscall=86 success=yes exit=0 a0=61b5c0 a1=61c640 a2=7fff2c90c220 a3=61b5c0 items=0 ppid=4257 pid=4260 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171585145.433:2591): avc: denied { unlink } for pid=4260 comm="procmail" name="_kCB.5hP1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171585145.433:2591): arch=c000003e syscall=87 success=yes exit=0 a0=61b5c0 a1=61c640 a2=7fff2c90c220 a3=61b5c0 items=0 ppid=4257 pid=4260 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1171585201.347:2592): user pid=4273 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171585201.347:2593): login pid=4273 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171585201.348:2594): user pid=4274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171585201.348:2595): login pid=4274 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171585201.353:2596): user pid=4274 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171585201.353:2597): user pid=4274 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171585201.358:2598): user pid=4273 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171585201.358:2599): user pid=4273 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171585201.380:2600): user pid=4273 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171585201.381:2601): user pid=4273 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171585501.681:2602): user pid=4318 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171585501.681:2603): login pid=4318 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171585501.685:2604): user pid=4318 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171585501.685:2605): user pid=4318 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171585801.006:2606): user pid=4361 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171585801.006:2607): login pid=4361 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171585801.008:2608): user pid=4362 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171585801.009:2609): login pid=4362 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171585801.010:2610): user pid=4361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171585801.010:2611): user pid=4361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171585801.013:2612): user pid=4362 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171585801.014:2613): user pid=4362 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171585801.033:2614): user pid=4361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171585801.033:2615): user pid=4361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171586101.353:2616): user pid=4397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171586101.354:2617): login pid=4397 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171586101.356:2618): user pid=4397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171586101.357:2619): user pid=4397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171586401.681:2620): user pid=4429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171586401.681:2621): login pid=4429 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171586401.683:2622): user pid=4430 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171586401.684:2623): login pid=4430 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171586401.685:2624): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171586401.685:2625): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171586401.689:2626): user pid=4430 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171586401.689:2627): user pid=4430 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171586401.703:2628): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171586401.703:2629): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171586701.020:2630): user pid=4464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171586701.020:2631): login pid=4464 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171586701.024:2632): user pid=4464 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171586701.024:2633): user pid=4464 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171587001.356:2634): user pid=4498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171587001.357:2635): login pid=4498 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171587001.358:2636): user pid=4499 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171587001.358:2637): login pid=4499 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171587001.363:2638): user pid=4498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171587001.363:2639): user pid=4498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171587001.368:2640): user pid=4499 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171587001.368:2641): user pid=4499 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171587001.383:2642): user pid=4498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171587001.383:2643): user pid=4498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171587301.707:2644): user pid=4533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171587301.708:2645): login pid=4533 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171587301.711:2646): user pid=4533 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171587301.711:2647): user pid=4533 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171587601.035:2648): user pid=4565 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171587601.036:2649): login pid=4565 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171587601.037:2650): user pid=4566 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171587601.037:2651): login pid=4566 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171587601.043:2652): user pid=4565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171587601.043:2653): user pid=4565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171587601.046:2654): user pid=4566 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171587601.046:2655): user pid=4566 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171587601.073:2656): user pid=4565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171587601.073:2657): user pid=4565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171587661.374:2658): user pid=4580 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171587661.374:2659): login pid=4580 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171587661.379:2660): user pid=4580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171587661.379:2661): user pid=4580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171587662.287:2662): user pid=4580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171587662.288:2663): user pid=4580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171587901.295:2664): user pid=4620 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171587901.295:2665): login pid=4620 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171587901.300:2666): user pid=4620 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171587901.300:2667): user pid=4620 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171588201.629:2668): user pid=4653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171588201.629:2669): login pid=4653 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171588201.632:2670): user pid=4654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171588201.632:2671): login pid=4654 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171588201.635:2672): user pid=4653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171588201.635:2673): user pid=4653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171588201.637:2674): user pid=4654 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171588201.637:2675): user pid=4654 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171588201.654:2676): user pid=4653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171588201.654:2677): user pid=4653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171588440.581:2678): user pid=3613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171588440.582:2679): user pid=3613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171588501.586:2680): user pid=4690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171588501.587:2681): login pid=4690 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171588501.590:2682): user pid=4690 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171588501.590:2683): user pid=4690 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171588801.910:2684): user pid=4723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171588801.911:2685): login pid=4723 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171588801.913:2686): user pid=4724 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171588801.913:2687): login pid=4724 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171588801.915:2688): user pid=4723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171588801.915:2689): user pid=4723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171588801.920:2690): user pid=4724 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171588801.920:2691): user pid=4724 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171588801.938:2692): user pid=4723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171588801.938:2693): user pid=4723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171589101.251:2694): user pid=4763 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171589101.251:2695): login pid=4763 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171589101.254:2696): user pid=4763 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171589101.254:2697): user pid=4763 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171589401.576:2698): user pid=4798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171589401.576:2699): login pid=4798 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171589401.579:2700): user pid=4799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171589401.579:2701): login pid=4799 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171589401.582:2702): user pid=4798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171589401.582:2703): user pid=4798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171589401.584:2704): user pid=4799 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171589401.584:2705): user pid=4799 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171589401.603:2706): user pid=4798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171589401.603:2707): user pid=4798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171589420.760:2708): avc: denied { getattr } for pid=4821 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171589420.760:2708): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffc5daaca0 a2=7fffc5daaca0 a3=6c6280 items=0 ppid=3451 pid=4821 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171589420.760:2708): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171589420.760:2709): avc: denied { read } for pid=4821 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171589420.760:2709): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4821 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171589610.888:2710): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171589610.888:2710): arch=c000003e syscall=2 success=yes exit=8 a0=320d540 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171589610.889:2711): avc: denied { ioctl } for pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171589610.889:2711): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171589610.889:2711): path="/home/dhighley/.razor/server.c123.cloudmark.com.conf" >type=AVC msg=audit(1171589616.406:2712): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171589616.406:2712): arch=c000003e syscall=62 success=yes exit=0 a0=12ec a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171589616.419:2713): avc: denied { write } for pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171589616.419:2713): arch=c000003e syscall=2 success=yes exit=8 a0=338b050 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=USER_ACCT msg=audit(1171589701.918:2714): user pid=4852 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171589701.919:2715): login pid=4852 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171589701.922:2716): user pid=4852 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171589701.922:2717): user pid=4852 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171590001.250:2718): user pid=4886 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171590001.251:2719): login pid=4886 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171590001.252:2720): user pid=4887 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171590001.252:2721): login pid=4887 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171590001.254:2722): user pid=4886 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171590001.254:2723): user pid=4886 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171590001.264:2724): user pid=4887 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171590001.264:2725): user pid=4887 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171590001.272:2726): user pid=4886 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171590001.272:2727): user pid=4886 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171590301.599:2728): user pid=4923 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171590301.599:2729): login pid=4923 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171590301.603:2730): user pid=4923 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171590301.603:2731): user pid=4923 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171590601.924:2732): user pid=4956 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171590601.924:2733): login pid=4956 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171590601.926:2734): user pid=4957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171590601.926:2735): login pid=4957 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171590601.928:2736): user pid=4956 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171590601.928:2737): user pid=4956 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171590601.931:2738): user pid=4957 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171590601.931:2739): user pid=4957 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171590601.950:2740): user pid=4956 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171590601.950:2741): user pid=4956 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171590901.261:2742): user pid=4992 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171590901.261:2743): login pid=4992 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171590901.264:2744): user pid=4992 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171590901.264:2745): user pid=4992 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171591201.594:2746): user pid=5026 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171591201.594:2747): login pid=5026 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171591201.597:2748): user pid=5027 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171591201.598:2749): login pid=5027 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171591201.598:2750): user pid=5026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171591201.599:2751): user pid=5026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171591201.601:2752): user pid=5028 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171591201.601:2753): login pid=5028 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171591201.602:2754): user pid=5027 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171591201.602:2755): user pid=5027 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171591201.615:2756): user pid=5028 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171591201.615:2757): user pid=5028 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171591201.622:2758): user pid=5026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171591201.623:2759): user pid=5026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171591261.933:2760): user pid=5047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171591261.934:2761): login pid=5047 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171591261.936:2762): user pid=5047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171591261.937:2763): user pid=5047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171591262.834:2764): user pid=5047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171591262.835:2765): user pid=5047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171591494.114:2766): avc: denied { create } for pid=5093 comm="pyzor" name="luCFfX" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171591494.114:2766): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=5093 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171591494.115:2767): avc: denied { getattr } for pid=5093 comm="pyzor" name="luCFfX" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171591494.115:2767): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb5e76260 a2=7fffb5e76260 a3=3 items=0 ppid=3451 pid=5093 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171591494.115:2767): path="/tmp/luCFfX" >type=AVC msg=audit(1171591494.115:2768): avc: denied { write } for pid=5093 comm="pyzor" name="luCFfX" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171591494.115:2768): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef158c4 items=0 ppid=3451 pid=5093 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171591494.115:2768): path="/tmp/luCFfX" >type=AVC msg=audit(1171591494.116:2769): avc: denied { unlink } for pid=5093 comm="pyzor" name="luCFfX" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171591494.116:2769): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=5093 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171591494.119:2770): avc: denied { read } for pid=5093 comm="pyzor" name="tmpYNKbQ6" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171591494.119:2770): arch=c000003e syscall=0 success=yes exit=1457 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=5093 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171591494.119:2770): path=2F746D702F746D70594E4B625136202864656C6574656429 >type=USER_ACCT msg=audit(1171591501.842:2771): user pid=5094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171591501.842:2772): login pid=5094 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171591501.846:2773): user pid=5094 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171591501.846:2774): user pid=5094 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171591801.172:2775): user pid=5126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171591801.172:2776): login pid=5126 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171591801.174:2777): user pid=5127 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171591801.174:2778): login pid=5127 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171591801.179:2779): user pid=5126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171591801.179:2780): user pid=5126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171591801.184:2781): user pid=5127 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171591801.184:2782): user pid=5127 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171591801.198:2783): user pid=5126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171591801.198:2784): user pid=5126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171592101.511:2785): user pid=5161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171592101.512:2786): login pid=5161 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171592101.516:2787): user pid=5161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171592101.516:2788): user pid=5161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171592401.835:2789): user pid=5194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171592401.835:2790): login pid=5194 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171592401.837:2791): user pid=5195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171592401.838:2792): login pid=5195 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171592401.840:2793): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171592401.840:2794): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171592401.844:2795): user pid=5195 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171592401.844:2796): user pid=5195 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171592401.870:2797): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171592401.871:2798): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171592701.173:2799): user pid=5231 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171592701.174:2800): login pid=5231 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171592701.176:2801): user pid=5231 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171592701.176:2802): user pid=5231 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171593001.501:2803): user pid=5264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171593001.501:2804): login pid=5264 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171593001.503:2805): user pid=5265 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171593001.503:2806): login pid=5265 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171593001.505:2807): user pid=5264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171593001.505:2808): user pid=5264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171593001.508:2809): user pid=5265 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171593001.509:2810): user pid=5265 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171593001.526:2811): user pid=5264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171593001.526:2812): user pid=5264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171593301.838:2813): user pid=5303 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171593301.838:2814): login pid=5303 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171593301.842:2815): user pid=5303 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171593301.842:2816): user pid=5303 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171593601.167:2817): user pid=5337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171593601.167:2818): login pid=5337 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171593601.169:2819): user pid=5338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171593601.170:2820): login pid=5338 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171593601.171:2821): user pid=5337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171593601.171:2822): user pid=5337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171593601.178:2823): user pid=5338 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171593601.178:2824): user pid=5338 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171593601.198:2825): user pid=5337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171593601.199:2826): user pid=5337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171593772.773:2827): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1171593772.773:2828): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1171593782.925:2829): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1171593782.926:2830): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1171593782.934:2831): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1171593782.943:2832): login pid=3689 uid=0 old auid=1000 new auid=1000 >type=USER_START msg=audit(1171593782.952:2833): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1171593782.953:2834): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1171593832.860:2835): user pid=5582 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1171593832.861:2836): user pid=5582 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1171593832.871:2837): user pid=5582 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1171593832.871:2838): user pid=5582 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1171593854.705:2839): user pid=5648 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1171593854.705:2840): user pid=5648 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1171593854.713:2841): user pid=5648 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1171593854.714:2842): user pid=5648 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1171593873.822:2843): user pid=5718 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1171593873.822:2844): user pid=5718 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1171593873.832:2845): user pid=5718 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1171593873.832:2846): user pid=5718 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=AVC msg=audit(1171593883.244:2847): avc: denied { ioctl } for pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634255 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171593883.244:2847): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171593883.244:2847): path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.3451" >type=AVC msg=audit(1171593883.244:2848): avc: denied { link } for pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634255 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171593883.244:2848): arch=c000003e syscall=86 success=yes exit=0 a0=32c0e10 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171593883.244:2849): avc: denied { unlink } for pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634255 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171593883.244:2849): arch=c000003e syscall=87 success=yes exit=0 a0=32c0e10 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171593883.246:2850): avc: denied { write } for pid=3451 comm="spamd" name="bayes_seen" dev=dm-0 ino=15630939 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171593883.246:2850): arch=c000003e syscall=2 success=yes exit=8 a0=2dfd6a0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171593883.247:2851): avc: denied { setattr } for pid=3451 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634255 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171593883.247:2851): arch=c000003e syscall=132 success=yes exit=0 a0=3095f40 a1=7fffbe9f5460 a2=37a0b12b60 a3=1f32860 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171593883.250:2852): avc: denied { rename } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171593883.250:2852): arch=c000003e syscall=82 success=yes exit=0 a0=33590e0 a1=31ab9e0 a2=37a0b1227e a3=8 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171593890.485:2853): avc: denied { append } for pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171593890.485:2853): arch=c000003e syscall=1 success=yes exit=1968 a0=9 a1=3396810 a2=7b0 a3=11 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171593890.485:2853): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171593890.495:2854): avc: denied { append } for pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171593890.495:2854): arch=c000003e syscall=2 success=yes exit=8 a0=32f36b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171593891.195:2855): avc: denied { search } for pid=5767 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171593891.195:2855): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171593891.196:2856): avc: denied { getattr } for pid=5767 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171593891.196:2856): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffc4643540 a2=7fffc4643540 a3=6c6280 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171593891.196:2856): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171593891.196:2857): avc: denied { read } for pid=5767 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171593891.196:2857): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171593891.197:2858): avc: denied { search } for pid=5767 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171593891.197:2858): avc: denied { write } for pid=5767 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171593891.197:2858): avc: denied { add_name } for pid=5767 comm="pyzor" name="Xl5SZ6" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171593891.197:2858): avc: denied { create } for pid=5767 comm="pyzor" name="Xl5SZ6" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171593891.197:2858): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171593891.197:2859): avc: denied { getattr } for pid=5767 comm="pyzor" name="Xl5SZ6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171593891.197:2859): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffc4641e40 a2=7fffc4641e40 a3=2 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171593891.197:2859): path="/tmp/Xl5SZ6" >type=AVC msg=audit(1171593891.198:2860): avc: denied { write } for pid=5767 comm="pyzor" name="Xl5SZ6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171593891.198:2860): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171593891.198:2860): path="/tmp/Xl5SZ6" >type=AVC msg=audit(1171593891.198:2861): avc: denied { remove_name } for pid=5767 comm="pyzor" name="Xl5SZ6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171593891.198:2861): avc: denied { unlink } for pid=5767 comm="pyzor" name="Xl5SZ6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171593891.198:2861): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171593891.200:2862): avc: denied { read } for pid=5767 comm="pyzor" name="tmprxSRS2" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171593891.200:2862): arch=c000003e syscall=0 success=yes exit=602 a0=4 a1=2aaaaf34d000 a2=1000 a3=67 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171593891.200:2862): path=2F746D702F746D70727853525332202864656C6574656429 >type=AVC msg=audit(1171593896.153:2863): avc: denied { signal } for pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171593896.153:2863): arch=c000003e syscall=62 success=yes exit=0 a0=1687 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171593896.268:2864): avc: denied { write } for pid=5762 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171593896.268:2864): avc: denied { add_name } for pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171593896.268:2864): avc: denied { create } for pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171593896.268:2864): arch=c000003e syscall=2 success=yes exit=6 a0=61c950 a1=c1 a2=124 a3=61c950 items=0 ppid=5759 pid=5762 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171593896.269:2865): avc: denied { write } for pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171593896.269:2865): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c950 items=0 ppid=5759 pid=5762 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171593896.269:2865): path="/home/dhighley/_CaB.oqR1FB.douglas" >type=AVC msg=audit(1171593896.269:2866): avc: denied { getattr } for pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171593896.269:2866): arch=c000003e syscall=4 success=yes exit=0 a0=61c950 a1=7fffd3c6d650 a2=7fffd3c6d650 a3=61c950 items=0 ppid=5759 pid=5762 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171593896.269:2866): path="/home/dhighley/_CaB.oqR1FB.douglas" >type=AVC msg=audit(1171593896.269:2867): avc: denied { link } for pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171593896.269:2867): arch=c000003e syscall=86 success=yes exit=0 a0=61c950 a1=61b530 a2=7fffd3c6d570 a3=61c950 items=0 ppid=5759 pid=5762 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171593896.269:2868): avc: denied { remove_name } for pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171593896.269:2868): avc: denied { unlink } for pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171593896.269:2868): arch=c000003e syscall=87 success=yes exit=0 a0=61c950 a1=61b530 a2=7fffd3c6d570 a3=61c950 items=0 ppid=5759 pid=5762 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171593896.269:2869): avc: denied { append } for pid=5762 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171593896.269:2869): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=5759 pid=5762 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1171593900.873:2870): user pid=5797 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1171593900.874:2871): user pid=5797 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1171593900.882:2872): user pid=5797 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1171593900.882:2873): user pid=5797 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1171593901.514:2874): user pid=5834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171593901.515:2875): login pid=5834 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171593901.519:2876): user pid=5834 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171593901.520:2877): user pid=5834 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171593972.799:2878): user pid=5648 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1171593972.800:2879): user pid=5648 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1171594025.022:2880): user pid=5718 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1171594025.023:2881): user pid=5718 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1171594074.766:2882): user pid=5797 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1171594074.768:2883): user pid=5797 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=MAC_POLICY_LOAD msg=audit(1171594078.590:2884): policy loaded auid=1000 >type=SYSCALL msg=audit(1171594078.590:2884): arch=c000003e syscall=1 success=yes exit=1139380 a0=4 a1=2aaaaab05000 a2=1162b4 a3=0 items=0 ppid=5882 pid=5884 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null) >type=AVC msg=audit(1171594099.336:2885): avc: denied { search } for pid=5980 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171594099.336:2885): avc: denied { write } for pid=5980 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171594099.336:2885): avc: denied { add_name } for pid=5980 comm="pyzor" name="lXon5A" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171594099.336:2885): avc: denied { create } for pid=5980 comm="pyzor" name="lXon5A" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171594099.336:2885): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=5974 pid=5980 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171594099.336:2886): avc: denied { getattr } for pid=5980 comm="pyzor" name="lXon5A" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171594099.336:2886): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff9853b920 a2=7fff9853b920 a3=2 items=0 ppid=5974 pid=5980 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171594099.336:2886): path="/tmp/lXon5A" >type=AVC msg=audit(1171594099.336:2887): avc: denied { write } for pid=5980 comm="pyzor" name="lXon5A" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171594099.336:2887): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8ec4 items=0 ppid=5974 pid=5980 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171594099.336:2887): path="/tmp/lXon5A" >type=AVC msg=audit(1171594099.337:2888): avc: denied { remove_name } for pid=5980 comm="pyzor" name="lXon5A" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171594099.337:2888): avc: denied { unlink } for pid=5980 comm="pyzor" name="lXon5A" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171594099.337:2888): arch=c000003e syscall=87 success=yes exit=0 a0=61d5b0 a1=6c6280 a2=37a8f2f4d8 a3=61d5b0 items=0 ppid=5974 pid=5980 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171594099.339:2889): avc: denied { read } for pid=5980 comm="pyzor" name="tmpM6qEdz" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171594099.339:2889): arch=c000003e syscall=0 success=yes exit=1120 a0=4 a1=2aaaaf34d000 a2=1000 a3=e0 items=0 ppid=5974 pid=5980 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171594099.339:2889): path=2F746D702F746D704D367145647A202864656C6574656429 >type=AVC msg=audit(1171594104.293:2890): avc: denied { signal } for pid=5974 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171594104.293:2890): arch=c000003e syscall=62 success=yes exit=0 a0=175c a1=f a2=54 a3=0 items=0 ppid=1 pid=5974 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=USER_AUTH msg=audit(1171594118.734:2891): user pid=5991 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1171594118.734:2892): user pid=5991 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1171594118.763:2893): user pid=5991 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1171594127.331:2894): user pid=5991 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1171594134.584:2895): user pid=6003 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1171594134.585:2896): user pid=6003 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1171594134.590:2897): user pid=6003 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_STATUS msg=audit(1171594155.405:2898): enforcing=1 old_enforcing=0 auid=1000 >type=SYSCALL msg=audit(1171594155.405:2898): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff998e34e0 a2=1 a3=0 items=0 ppid=6010 pid=6011 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setenforce" exe="/usr/sbin/setenforce" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_END msg=audit(1171594155.484:2899): user pid=6003 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1171594168.071:2900): user pid=6051 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594168.074:2901): user pid=6051 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171594183.627:2902): user pid=6058 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594183.630:2903): user pid=6058 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171594201.152:2904): user pid=6067 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594201.155:2905): user pid=6067 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594201.871:2906): user pid=6073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171594201.872:2907): user pid=6074 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171594201.872:2908): login pid=6073 uid=0 old auid=4294967295 new auid=0 >type=LOGIN msg=audit(1171594201.872:2909): login pid=6074 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171594201.877:2910): user pid=6074 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171594201.878:2911): user pid=6074 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171594201.887:2912): user pid=6073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171594201.887:2913): user pid=6073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171594201.911:2914): user pid=6073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171594201.911:2915): user pid=6073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171594208.006:2916): user pid=6089 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594208.010:2917): user pid=6089 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=AVC msg=audit(1171594351.233:2918): avc: denied { append } for pid=5986 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171594351.233:2918): arch=c000003e syscall=2 success=no exit=-13 a0=2d806b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594351.752:2919): avc: denied { search } for pid=6117 comm="pyzor" name="/" dev=autofs ino=10947 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171594351.752:2919): arch=c000003e syscall=2 success=no exit=-13 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5986 pid=6117 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171594351.753:2920): avc: denied { search } for pid=6117 comm="pyzor" name="/" dev=autofs ino=10947 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171594351.753:2920): arch=c000003e syscall=4 success=no exit=-13 a0=6c6240 a1=7fff1fbe2b80 a2=7fff1fbe2b80 a3=6c6240 items=0 ppid=5986 pid=6117 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171594351.753:2921): avc: denied { search } for pid=6117 comm="pyzor" name="/" dev=autofs ino=10947 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171594351.753:2921): arch=c000003e syscall=83 success=no exit=-13 a0=6c6240 a1=1ff a2=37a8f2f4d8 a3=6c6240 items=0 ppid=5986 pid=6117 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171594354.222:2922): avc: denied { ioctl } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594354.222:2922): arch=c000003e syscall=16 success=no exit=-13 a0=8 a1=5401 a2=7fffa86d1de0 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171594354.222:2922): path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.5986" >type=AVC msg=audit(1171594354.222:2923): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594354.222:2923): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594355.669:2924): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594355.669:2924): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594356.612:2925): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594356.612:2925): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594357.687:2926): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594357.687:2926): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594358.724:2927): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594358.724:2927): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594359.848:2928): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594359.848:2928): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594360.727:2929): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594360.727:2929): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594362.210:2930): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594362.210:2930): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594362.945:2931): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594362.945:2931): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594363.827:2932): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594363.827:2932): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594364.888:2933): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594364.888:2933): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594365.707:2934): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594365.707:2934): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594366.833:2935): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594366.833:2935): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594368.074:2936): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594368.074:2936): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594369.503:2937): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594369.503:2937): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594370.719:2938): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594370.719:2938): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594371.390:2939): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594371.390:2939): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594372.232:2940): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594372.232:2940): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594373.173:2941): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594373.173:2941): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594374.128:2942): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594374.128:2942): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594374.875:2943): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594374.875:2943): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594376.290:2944): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594376.290:2944): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594377.107:2945): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594377.107:2945): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594377.869:2946): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594377.869:2946): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594379.316:2947): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594379.316:2947): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594380.799:2948): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594380.799:2948): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594381.845:2949): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594381.845:2949): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594382.578:2950): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594382.578:2950): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594383.581:2951): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594383.581:2951): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594384.476:2952): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594384.476:2952): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594384.476:2953): avc: denied { unlink } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594384.476:2953): arch=c000003e syscall=87 success=no exit=-13 a0=2d96b40 a1=1cb4d90 a2=37a0b12b60 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171594384.569:2954): avc: denied { write } for pid=6113 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1171594384.569:2954): arch=c000003e syscall=2 success=no exit=-13 a0=61fb70 a1=c1 a2=124 a3=61fb70 items=0 ppid=6110 pid=6113 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171594384.569:2955): avc: denied { append } for pid=6113 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171594384.569:2955): arch=c000003e syscall=2 success=no exit=-13 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=6110 pid=6113 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_AUTH msg=audit(1171594398.473:2956): user pid=6123 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1171594398.473:2957): user pid=6123 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1171594398.478:2958): user pid=6123 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1171594410.087:2959): user pid=6123 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1171594454.138:2960): user pid=6171 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594454.142:2961): user pid=6171 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171594454.538:2962): user pid=6177 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594454.541:2963): user pid=6177 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171594454.709:2964): user pid=6182 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594454.712:2965): user pid=6182 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171594479.667:2966): user pid=6191 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594479.670:2967): user pid=6191 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171594481.327:2968): user pid=6197 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594481.331:2969): user pid=6197 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171594482.338:2970): user pid=6203 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594482.341:2971): user pid=6203 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171594485.191:2972): user pid=6210 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594485.194:2973): user pid=6210 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594501.232:2974): user pid=6220 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171594501.232:2975): login pid=6220 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171594501.235:2976): user pid=6220 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171594501.235:2977): user pid=6220 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171594607.991:2978): user pid=6264 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1171594607.991:2979): user pid=6264 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1171594607.997:2980): user pid=6264 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_STATUS msg=audit(1171594615.320:2981): enforcing=0 old_enforcing=1 auid=1000 >type=SYSCALL msg=audit(1171594615.320:2981): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff00f82b80 a2=1 a3=0 items=0 ppid=6270 pid=6271 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setenforce" exe="/usr/sbin/setenforce" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_END msg=audit(1171594615.360:2982): user pid=6264 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1171594661.630:2983): user pid=6316 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594661.630:2984): user pid=6316 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171594661.881:2985): user pid=6319 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594661.881:2986): user pid=6319 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=AVC msg=audit(1171594661.915:2987): avc: denied { lock } for pid=6320 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594661.915:2987): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffa82f0750 a3=6b5458 items=0 ppid=3105 pid=6320 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null) >type=AVC_PATH msg=audit(1171594661.915:2987): path="/home/dhighley/Mail/Trash" >type=USER_AUTH msg=audit(1171594662.014:2988): user pid=6323 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594662.014:2989): user pid=6323 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171594683.169:2990): user pid=6366 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594683.170:2991): user pid=6366 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171594688.716:2992): user pid=6370 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594688.716:2993): user pid=6370 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=AVC msg=audit(1171594688.726:2994): avc: denied { lock } for pid=6371 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171594688.726:2994): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fff33a82ee0 a3=0 items=0 ppid=3105 pid=6371 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null) >type=AVC_PATH msg=audit(1171594688.726:2994): path="/home/dhighley/Mail/Trash" >type=USER_AUTH msg=audit(1171594690.191:2995): user pid=6374 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594690.191:2996): user pid=6374 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=AVC msg=audit(1171594690.203:2997): avc: denied { write } for pid=6375 comm="imap" name="Drafts" dev=dm-0 ino=12484611 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171594690.203:2997): arch=c000003e syscall=21 success=yes exit=0 a0=69e1b0 a1=6 a2=1b a3=6b0b98 items=0 ppid=3105 pid=6375 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null) >type=USER_AUTH msg=audit(1171594691.018:2998): user pid=6378 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594691.018:2999): user pid=6378 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171594801.576:3000): user pid=6453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171594801.577:3001): login pid=6453 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171594801.579:3002): user pid=6454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171594801.579:3003): login pid=6454 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171594801.581:3004): user pid=6453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171594801.581:3005): user pid=6453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171594801.593:3006): user pid=6454 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171594801.593:3007): user pid=6454 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171594801.931:3008): user pid=6453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171594801.931:3009): user pid=6453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171594861.937:3010): user pid=6469 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171594861.937:3011): login pid=6469 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1171594861.940:3012): user pid=6469 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171594861.940:3013): user pid=6469 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171594862.859:3014): user pid=6469 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171594862.861:3015): user pid=6469 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171595046.759:3016): avc: denied { append } for pid=5986 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595046.759:3016): arch=c000003e syscall=2 success=yes exit=11 a0=32f35d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171595046.759:3017): avc: denied { ioctl } for pid=5986 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595046.759:3017): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffa86d1de0 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171595046.759:3017): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171595046.780:3018): avc: denied { append } for pid=5986 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171595046.780:3018): arch=c000003e syscall=2 success=yes exit=8 a0=2fa8500 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171595046.784:3019): avc: denied { ioctl } for pid=5986 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595046.784:3019): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffa86d1de0 a3=0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171595046.784:3019): path="/home/dhighley/.razor/server.c123.cloudmark.com.conf" >type=AVC msg=audit(1171595047.337:3020): avc: denied { search } for pid=6515 comm="pyzor" name="/" dev=autofs ino=10947 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171595047.337:3020): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171595047.337:3021): avc: denied { getattr } for pid=6515 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171595047.337:3021): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff515314d0 a2=7fff515314d0 a3=6c6280 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171595047.337:3021): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171595047.338:3022): avc: denied { read } for pid=6515 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171595047.338:3022): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171595047.338:3023): avc: denied { search } for pid=6515 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171595047.338:3023): avc: denied { write } for pid=6515 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171595047.338:3023): avc: denied { add_name } for pid=6515 comm="pyzor" name="fQOOEu" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171595047.338:3023): avc: denied { create } for pid=6515 comm="pyzor" name="fQOOEu" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171595047.338:3023): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171595047.339:3024): avc: denied { getattr } for pid=6515 comm="pyzor" name="fQOOEu" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171595047.339:3024): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff5152fdd0 a2=7fff5152fdd0 a3=2 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171595047.339:3024): path="/tmp/fQOOEu" >type=AVC msg=audit(1171595047.339:3025): avc: denied { write } for pid=6515 comm="pyzor" name="fQOOEu" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171595047.339:3025): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8864 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171595047.339:3025): path="/tmp/fQOOEu" >type=AVC msg=audit(1171595047.339:3026): avc: denied { remove_name } for pid=6515 comm="pyzor" name="fQOOEu" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171595047.339:3026): avc: denied { unlink } for pid=6515 comm="pyzor" name="fQOOEu" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171595047.339:3026): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171595047.378:3027): avc: denied { read } for pid=6515 comm="pyzor" name="tmpjUxTnF" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171595047.378:3027): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=267d items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171595047.378:3027): path=2F746D702F746D706A5578546E46202864656C6574656429 >type=AVC msg=audit(1171595051.545:3028): avc: denied { getattr } for pid=6525 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595051.545:3028): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff609f4720 a2=7fff609f4720 a3=6c6280 items=0 ppid=5987 pid=6525 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171595051.545:3028): path="/home/phighley/.pyzor/servers" >type=AVC msg=audit(1171595051.545:3029): avc: denied { read } for pid=6525 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595051.545:3029): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5987 pid=6525 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171595051.546:3030): avc: denied { search } for pid=6525 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171595051.546:3030): avc: denied { write } for pid=6525 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171595051.546:3030): avc: denied { add_name } for pid=6525 comm="pyzor" name="RownFR" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171595051.546:3030): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=5987 pid=6525 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171595051.546:3031): avc: denied { remove_name } for pid=6525 comm="pyzor" name="RownFR" dev=dm-0 ino=30703640 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=SYSCALL msg=audit(1171595051.546:3031): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=5987 pid=6525 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171595052.299:3032): avc: denied { signal } for pid=5986 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171595052.299:3032): arch=c000003e syscall=62 success=yes exit=0 a0=1973 a1=f a2=54 a3=0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171595054.352:3033): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595054.352:3033): arch=c000003e syscall=86 success=yes exit=0 a0=32e2e60 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171595054.352:3034): avc: denied { unlink } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595054.352:3034): arch=c000003e syscall=87 success=yes exit=0 a0=32e2e60 a1=1cb4d90 a2=37a0b12b60 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171595054.353:3035): avc: denied { write } for pid=5986 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171595054.353:3035): arch=c000003e syscall=2 success=yes exit=8 a0=1fdf080 a1=2 a2=0 a3=180 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171595054.451:3036): avc: denied { write } for pid=6511 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171595054.451:3036): avc: denied { add_name } for pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171595054.451:3036): avc: denied { create } for pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595054.451:3036): arch=c000003e syscall=2 success=yes exit=6 a0=61b630 a1=c1 a2=124 a3=61b630 items=0 ppid=6508 pid=6511 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171595054.451:3037): avc: denied { write } for pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595054.451:3037): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b630 items=0 ppid=6508 pid=6511 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171595054.451:3037): path="/home/dhighley/_vlB.u8R1FB.douglas" >type=AVC msg=audit(1171595054.452:3038): avc: denied { getattr } for pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595054.452:3038): arch=c000003e syscall=4 success=yes exit=0 a0=61b630 a1=7fff24a6e440 a2=7fff24a6e440 a3=61b630 items=0 ppid=6508 pid=6511 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171595054.452:3038): path="/home/dhighley/_vlB.u8R1FB.douglas" >type=AVC msg=audit(1171595054.452:3039): avc: denied { link } for pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595054.452:3039): arch=c000003e syscall=86 success=yes exit=0 a0=61b630 a1=623d80 a2=7fff24a6e360 a3=61b630 items=0 ppid=6508 pid=6511 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171595054.452:3040): avc: denied { remove_name } for pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171595054.452:3040): avc: denied { unlink } for pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595054.452:3040): arch=c000003e syscall=87 success=yes exit=0 a0=61b630 a1=623d80 a2=7fff24a6e360 a3=61b630 items=0 ppid=6508 pid=6511 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171595054.452:3041): avc: denied { append } for pid=6511 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171595054.452:3041): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6508 pid=6511 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171595056.734:3042): avc: denied { getattr } for pid=6521 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595056.734:3042): arch=c000003e syscall=4 success=yes exit=0 a0=619450 a1=7fffca3cbd90 a2=7fffca3cbd90 a3=619453 items=0 ppid=6516 pid=6521 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171595056.734:3042): path="/home/phighley/spamlog" >type=AVC msg=audit(1171595056.734:3043): avc: denied { append } for pid=6521 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595056.734:3043): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6516 pid=6521 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171595056.735:3044): avc: denied { lock } for pid=6521 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595056.735:3044): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=6516 pid=6521 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171595056.735:3044): path="/home/phighley/spamlog" >type=USER_ACCT msg=audit(1171595101.872:3045): user pid=6530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171595101.872:3046): login pid=6530 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171595101.876:3047): user pid=6530 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171595101.876:3048): user pid=6530 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171595401.208:3049): user pid=6568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171595401.208:3050): login pid=6568 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171595401.210:3051): user pid=6569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171595401.211:3052): login pid=6569 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171595401.212:3053): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171595401.212:3054): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171595401.217:3055): user pid=6569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171595401.217:3056): user pid=6569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171595401.234:3057): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171595401.234:3058): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171595406.271:3059): user pid=6583 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1171595406.271:3060): user pid=6583 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1171595406.276:3061): user pid=6583 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_STATUS msg=audit(1171595413.674:3062): enforcing=1 old_enforcing=0 auid=1000 >type=SYSCALL msg=audit(1171595413.674:3062): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffe3536130 a2=1 a3=0 items=0 ppid=6590 pid=6591 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setenforce" exe="/usr/sbin/setenforce" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_END msg=audit(1171595413.725:3063): user pid=6583 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1171595453.061:3064): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171595453.065:3065): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171595453.318:3066): user pid=6605 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171595453.321:3067): user pid=6605 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171595453.423:3068): user pid=6612 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171595453.426:3069): user pid=6612 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_AUTH msg=audit(1171595624.185:3070): user pid=6634 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1171595624.185:3071): user pid=6634 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1171595624.189:3072): user pid=6634 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_STATUS msg=audit(1171595631.046:3073): enforcing=0 old_enforcing=1 auid=1000 >type=SYSCALL msg=audit(1171595631.046:3073): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff5984e450 a2=1 a3=0 items=0 ppid=6640 pid=6641 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setenforce" exe="/usr/sbin/setenforce" subj=system_u:system_r:unconfined_t:s0 key=(null) >type=USER_END msg=audit(1171595631.084:3074): user pid=6634 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1171595701.586:3075): user pid=6651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171595701.587:3076): login pid=6651 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171595701.590:3077): user pid=6651 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171595701.590:3078): user pid=6651 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1171595704.997:3079): user pid=6663 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1171595704.997:3080): user pid=6663 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1171595705.006:3081): user pid=6663 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1171595717.475:3082): user pid=6663 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1171595725.308:3083): user pid=6671 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171595725.308:3084): user pid=6671 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=AVC msg=audit(1171595725.332:3085): avc: denied { lock } for pid=6672 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171595725.332:3085): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffd5e5a2b0 a3=6b5458 items=0 ppid=3105 pid=6672 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null) >type=AVC_PATH msg=audit(1171595725.332:3085): path="/home/dhighley/Mail/Trash" >type=USER_AUTH msg=audit(1171595725.428:3086): user pid=6675 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171595725.428:3087): user pid=6675 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)' >type=USER_ACCT msg=audit(1171596001.947:3088): user pid=6737 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171596001.947:3089): login pid=6737 uid=0 old auid=4294967295 new auid=0 >type=USER_ACCT msg=audit(1171596001.949:3090): user pid=6738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171596001.950:3091): login pid=6738 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171596001.952:3092): user pid=6737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171596001.952:3093): user pid=6737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1171596001.956:3094): user pid=6738 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171596001.956:3095): user pid=6738 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1171596001.975:3096): user pid=6737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1171596001.975:3097): user pid=6737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1171596301.301:3098): user pid=6778 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1171596301.301:3099): login pid=6778 uid=0 old auid=4294967295 new auid=111 >type=USER_START msg=audit(1171596301.305:3100): user pid=6778 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1171596301.305:3101): user pid=6778 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1171596381.774:3102): avc: denied { append } for pid=5986 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171596381.774:3102): arch=c000003e syscall=2 success=yes exit=11 a0=33eca70 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171596381.774:3103): avc: denied { ioctl } for pid=5986 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171596381.774:3103): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffa86d1de0 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171596381.774:3103): path="/home/dhighley/.spamassassin/bayes_journal" >type=AVC msg=audit(1171596381.783:3104): avc: denied { append } for pid=5986 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171596381.783:3104): arch=c000003e syscall=2 success=yes exit=8 a0=32ece50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171596381.785:3105): avc: denied { ioctl } for pid=5986 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171596381.785:3105): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffa86d1de0 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC_PATH msg=audit(1171596381.785:3105): path="/home/dhighley/.razor/server.c123.cloudmark.com.conf" >type=AVC msg=audit(1171596382.352:3106): avc: denied { search } for pid=6806 comm="pyzor" name="/" dev=autofs ino=10947 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir >type=SYSCALL msg=audit(1171596382.352:3106): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171596382.352:3107): avc: denied { getattr } for pid=6806 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171596382.352:3107): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffe574f6f0 a2=7fffe574f6f0 a3=6c6280 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171596382.352:3107): path="/home/dhighley/.pyzor/servers" >type=AVC msg=audit(1171596382.353:3108): avc: denied { read } for pid=6806 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171596382.353:3108): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171596382.354:3109): avc: denied { search } for pid=6806 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171596382.354:3109): avc: denied { write } for pid=6806 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171596382.354:3109): avc: denied { add_name } for pid=6806 comm="pyzor" name="feFjU5" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171596382.354:3109): avc: denied { create } for pid=6806 comm="pyzor" name="feFjU5" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171596382.354:3109): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171596382.354:3110): avc: denied { getattr } for pid=6806 comm="pyzor" name="feFjU5" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171596382.354:3110): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe574dff0 a2=7fffe574dff0 a3=2 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171596382.354:3110): path="/tmp/feFjU5" >type=AVC msg=audit(1171596382.354:3111): avc: denied { write } for pid=6806 comm="pyzor" name="feFjU5" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171596382.354:3111): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171596382.354:3111): path="/tmp/feFjU5" >type=AVC msg=audit(1171596382.354:3112): avc: denied { remove_name } for pid=6806 comm="pyzor" name="feFjU5" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir >type=AVC msg=audit(1171596382.354:3112): avc: denied { unlink } for pid=6806 comm="pyzor" name="feFjU5" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171596382.354:3112): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC msg=audit(1171596382.359:3113): avc: denied { read } for pid=6806 comm="pyzor" name="tmpMDvjl-" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1171596382.359:3113): arch=c000003e syscall=0 success=yes exit=2172 a0=4 a1=6dc930 a2=2000 a3=3 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null) >type=AVC_PATH msg=audit(1171596382.359:3113): path=2F746D702F746D704D44766A6C2D202864656C6574656429 >type=AVC msg=audit(1171596387.313:3114): avc: denied { signal } for pid=5986 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process >type=SYSCALL msg=audit(1171596387.313:3114): arch=c000003e syscall=62 success=yes exit=0 a0=1a96 a1=f a2=54 a3=0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171596387.508:3115): avc: denied { link } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171596387.508:3115): arch=c000003e syscall=86 success=yes exit=0 a0=30d0c90 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171596387.508:3116): avc: denied { unlink } for pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171596387.508:3116): arch=c000003e syscall=87 success=yes exit=0 a0=30d0c90 a1=1cb4d90 a2=37a0b12b60 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171596387.509:3117): avc: denied { write } for pid=5986 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171596387.509:3117): arch=c000003e syscall=2 success=yes exit=8 a0=33e9b50 a1=2 a2=0 a3=180 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null) >type=AVC msg=audit(1171596387.518:3118): avc: denied { write } for pid=6802 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171596387.518:3118): avc: denied { add_name } for pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171596387.518:3118): avc: denied { create } for pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171596387.518:3118): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=6799 pid=6802 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171596387.519:3119): avc: denied { write } for pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171596387.519:3119): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=6799 pid=6802 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171596387.519:3119): path="/home/dhighley/_SqB.jRS1FB.douglas" >type=AVC msg=audit(1171596387.519:3120): avc: denied { getattr } for pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171596387.519:3120): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff85f038f0 a2=7fff85f038f0 a3=61b650 items=0 ppid=6799 pid=6802 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC_PATH msg=audit(1171596387.519:3120): path="/home/dhighley/_SqB.jRS1FB.douglas" >type=AVC msg=audit(1171596387.519:3121): avc: denied { link } for pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171596387.519:3121): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61e8f0 a2=7fff85f03810 a3=61b650 items=0 ppid=6799 pid=6802 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171596387.519:3122): avc: denied { remove_name } for pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir >type=AVC msg=audit(1171596387.519:3122): avc: denied { unlink } for pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file >type=SYSCALL msg=audit(1171596387.519:3122): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e8f0 a2=7fff85f03810 a3=61b650 items=0 ppid=6799 pid=6802 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1171596387.519:3123): avc: denied { append } for pid=6802 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1171596387.519:3123): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6799 pid=6802 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 222778
: 148169